Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2026-33811 (GCVE-0-2026-33811)
Vulnerability from cvelistv5 – Published: 2026-05-07 19:41 – Updated: 2026-08-25 12:05
VLAI
EPSS
VEX
Title
Crash when handling long CNAME response in net
Summary
When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash.
Severity
7.5 (High)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-05-08 14:25 UTC
Assigner
References
101 references
Impacted products
185 products
| Vendor | Product | Version | CPE status | |
|---|---|---|---|---|
| Go standard library | net |
Affected:
0 , < 1.25.10
(semver)
Affected: 1.26.0-0 , < 1.26.3 (semver) |
guessed | |
| Red Hat | Cryostat 4 on RHEL 9 |
Unaffected:
4.2.0-19 , < *
(rpm)
cpe:/a:redhat:cryostat:4::el9 |
||
| Red Hat | Red Hat Ansible Automation Platform 2.5 for RHEL 8 |
Unaffected:
0:1.6.6-1.el8ap , < *
(rpm)
cpe:/a:redhat:ansible_automation_platform:2.5::el8 |
||
| Red Hat | Red Hat Ansible Automation Platform 2.5 for RHEL 8 |
Unaffected:
0:2.5.10-7.el8ap , < *
(rpm)
cpe:/a:redhat:ansible_automation_platform:2.5::el8 |
||
| Red Hat | Red Hat Ansible Automation Platform 2.5 for RHEL 9 |
Unaffected:
0:1.6.6-1.el9ap , < *
(rpm)
cpe:/a:redhat:ansible_automation_platform:2.5::el9 |
||
| Red Hat | Red Hat Ansible Automation Platform 2.5 for RHEL 9 |
Unaffected:
0:2.6.17-2.el9ap , < *
(rpm)
cpe:/a:redhat:ansible_automation_platform:2.5::el9 |
||
| Red Hat | Red Hat Ansible Automation Platform 2.6 for RHEL 10 |
Unaffected:
0:1.6.6-1.el10ap , < *
(rpm)
cpe:/a:redhat:ansible_automation_platform:2.6::el10 |
||
| Red Hat | Red Hat Ansible Automation Platform 2.6 for RHEL 9 |
Unaffected:
0:1.6.6-1.el9ap , < *
(rpm)
cpe:/a:redhat:ansible_automation_platform:2.6::el9 |
||
| Red Hat | Red Hat Ansible Automation Platform 2.6 for RHEL 9 |
Unaffected:
0:2.6.17-2.el9ap , < *
(rpm)
cpe:/a:redhat:ansible_automation_platform:2.6::el9 |
||
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
0:0.152.1-1.el10_2 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.2 |
||
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
0:0.9.27-7.el10_2.2 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.2 |
||
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
0:3.7.1-5.el10_2.6 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.2 |
||
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
0:0.4.9.2-1.el10_2 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.2 |
||
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
0:0.2.10-1.el10_2 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.2 |
||
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support |
Unaffected:
0:1.26.1-1.el10_0 , < *
(rpm)
cpe:/o:redhat:enterprise_linux_eus:10.0 |
||
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support |
Unaffected:
0:0.4.7-5.el10_0 , < *
(rpm)
cpe:/o:redhat:enterprise_linux_eus:10.0 |
||
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support |
Unaffected:
0:0.152.1-1.el10_0 , < *
(rpm)
cpe:/o:redhat:enterprise_linux_eus:10.0 |
||
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support |
Unaffected:
0:0.2.3-6.el10_0 , < *
(rpm)
cpe:/o:redhat:enterprise_linux_eus:10.0 |
||
| Red Hat | Red Hat Enterprise Linux 7 Extended Lifecycle Support |
Unaffected:
0:0.11-1.el7_9 , < *
(rpm)
cpe:/o:redhat:rhel_els:7 |
||
| Red Hat | Red Hat Enterprise Linux 8 |
Unaffected:
1:0.2.5-8.el8_10 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:8 |
||
| Red Hat | Red Hat Enterprise Linux 8 |
Unaffected:
8100020260709093628.afee755d , < *
(rpm)
cpe:/a:redhat:enterprise_linux:8 |
||
| Red Hat | Red Hat Enterprise Linux 8 |
Unaffected:
0:3.4.1-12.el8_10 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:8 |
||
| Red Hat | Red Hat Enterprise Linux 9 |
Unaffected:
0:0.152.1-1.el9_8 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:9 |
||
| Red Hat | Red Hat Enterprise Linux 9 |
Unaffected:
0:1.2.11-2.el9_8 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:9 |
||
| Red Hat | Red Hat Enterprise Linux 9 |
Unaffected:
0:3.7.1-4.el9_8.2 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:9 |
||
| Red Hat | Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions |
Unaffected:
0:0.152.1-1.el9_4 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:9.4 |
||
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support |
Unaffected:
0:0.152.1-1.el9_6 , < *
(rpm)
cpe:/a:redhat:rhel_eus:9.6 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.19 |
Unaffected:
0:1.32.0-6.el9 , < *
(rpm)
cpe:/a:redhat:openshift:4.19::el8 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.19 |
Unaffected:
0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9 , < *
(rpm)
cpe:/a:redhat:openshift:4.19::el8 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.19 |
Unaffected:
0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8 , < *
(rpm)
cpe:/a:redhat:openshift:4.19::el8 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.19 |
Unaffected:
0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9 , < *
(rpm)
cpe:/a:redhat:openshift:4.19::el8 |
||
| Red Hat | Red Hat OpenStack Platform 16.2 |
Unaffected:
0:0.2.1-1.1.el8ost , < *
(rpm)
cpe:/a:redhat:openstack:16.2::el8 |
||
| Red Hat | Red Hat OpenStack Platform 16.2 |
Unaffected:
0:3.3.23-22.el8ost , < *
(rpm)
cpe:/a:redhat:openstack:16.2::el8 |
||
| Red Hat | Red Hat OpenStack Services on OpenShift 18.0 |
Unaffected:
0:0.1.1-18.0.20260602234716.a95ae05.el9ost , < *
(rpm)
cpe:/a:redhat:openstack:18.0::el9 |
||
| Red Hat | Red Hat Satellite 6.16 for RHEL 8 |
Unaffected:
0:0.0.4-1.el8sat , < *
(rpm)
cpe:/a:redhat:satellite:6.16::el8 |
||
| Red Hat | Red Hat Satellite 6.16 for RHEL 9 |
Unaffected:
0:0.0.4-1.el9sat , < *
(rpm)
cpe:/a:redhat:satellite:6.16::el9 |
||
| Red Hat | Red Hat Satellite 6.17 for RHEL 9 |
Unaffected:
0:0.0.4-1.el9sat , < *
(rpm)
cpe:/a:redhat:satellite:6.17::el9 |
||
| Red Hat | Red Hat Satellite 6.18 for RHEL 9 |
Unaffected:
0:0.0.4-1.el9sat , < *
(rpm)
cpe:/a:redhat:satellite:6.18::el9 |
||
| Red Hat | Red Hat Satellite 6.19 for RHEL 9 |
Unaffected:
0:0.0.4-1.el9sat , < *
(rpm)
cpe:/a:redhat:satellite:6.19::el9 |
||
| Red Hat | RHEM 1.0 for RHEL 9 |
Unaffected:
0:1.0.3-1.el9em , < *
(rpm)
cpe:/a:redhat:edge_manager:1.0::el9 |
||
| Red Hat | RHEM 1.1 for RHEL 10 |
Unaffected:
0:1.1.3-1.el10em , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el10 |
||
| Red Hat | RHEM 1.1 for RHEL 9 |
Unaffected:
0:1.1.3-1.el9em , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el9 |
||
| Red Hat | Streams for Apache Kafka 3.2.1 |
Unaffected:
danielqsj-kafka_exporter , < *
(rpm)
cpe:/a:redhat:amq_streams:3.2::el9 |
||
| Red Hat | Compliance Operator 1 |
Unaffected:
1786380082 , < *
(rpm)
cpe:/a:redhat:openshift_compliance_operator:1::el9 |
||
| Red Hat | Logging for Red Hat OpenShift 6.0 |
Unaffected:
1785418851 , < *
(rpm)
cpe:/a:redhat:logging:6.0::el9 |
||
| Red Hat | Logging for Red Hat OpenShift 6.2 |
Unaffected:
1784747813 , < *
(rpm)
cpe:/a:redhat:logging:6.2::el9 |
||
| Red Hat | Logging Subsystem for Red Hat OpenShift 6.4 |
Unaffected:
1782408807 , < *
(rpm)
cpe:/a:redhat:logging:6.4::el9 |
||
| Red Hat | Logging Subsystem for Red Hat OpenShift 6.5 |
Unaffected:
1786645248 , < *
(rpm)
cpe:/a:redhat:logging:6.5::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.10 |
Unaffected:
1784915379 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.10::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.11.0 |
Unaffected:
1786911941 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.11::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.11.0 |
Unaffected:
1786911952 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.11::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.11.0 |
Unaffected:
1786911945 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.11::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.11.0 |
Unaffected:
1786911975 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.11::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.11.0 |
Unaffected:
1786912006 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.11::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.11.0 |
Unaffected:
1786911973 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.11::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.11.0 |
Unaffected:
1786911950 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.11::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.11.0 |
Unaffected:
1786911984 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.11::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.11.0 |
Unaffected:
1786907276 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.11::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.6 |
Unaffected:
1783985999 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.6::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.8 |
Unaffected:
1784306906 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.8::el9 |
||
| Red Hat | Multicluster Global Hub 1.5.6 |
Unaffected:
1784127491 , < *
(rpm)
cpe:/a:redhat:multicluster_globalhub:1.5::el9 |
||
| Red Hat | Multicluster Global Hub 1.7.0 |
Unaffected:
1784768332 , < *
(rpm)
Unaffected: 1785775948 , < * (rpm) cpe:/a:redhat:multicluster_globalhub:1.7::el9 |
||
| Red Hat | OpenShift API for Data Protection 1.3 |
Unaffected:
1785180878 , < *
(rpm)
cpe:/a:redhat:openshift_api_data_protection:1.3::el9 |
||
| Red Hat | OpenShift API for Data Protection 1.6 |
Unaffected:
1784058822 , < *
(rpm)
cpe:/a:redhat:openshift_api_data_protection:1.6::el9 |
||
| Red Hat | OpenShift Developer Tools and Services 1.6.2 |
Unaffected:
1784727697 , < *
(rpm)
cpe:/a:redhat:source_to_image:1.6::el8 |
||
| Red Hat | OpenShift Developer Tools and Services 1.6.2 |
Unaffected:
1784728036 , < *
(rpm)
cpe:/a:redhat:source_to_image:1.6::el8 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.16 |
Unaffected:
1786908301 , < *
(rpm)
cpe:/a:redhat:acm:2.16::el9 |
||
| Red Hat | Red Hat Advanced Cluster Security for Kubernetes 4.10 |
Unaffected:
1783357140 , < *
(rpm)
cpe:/a:redhat:advanced_cluster_security:4.10::el8 |
||
| Red Hat | Red Hat Advanced Cluster Security for Kubernetes 4.11 |
Unaffected:
1783352589 , < *
(rpm)
cpe:/a:redhat:advanced_cluster_security:4.11::el9 |
||
| Red Hat | Red Hat Advanced Cluster Security for Kubernetes 4.9 |
Unaffected:
1783357116 , < *
(rpm)
cpe:/a:redhat:advanced_cluster_security:4.9::el8 |
||
| Red Hat | Red Hat Ansible Automation Platform 2.6 |
Unaffected:
1783962464 , < *
(rpm)
cpe:/a:redhat:ansible_automation_platform:2.6::el9 |
||
| Red Hat | Red Hat Developer Hub 1.9 |
Unaffected:
1782767215 , < *
(rpm)
cpe:/a:redhat:rhdh:1.9::el9 |
||
| Red Hat | Red Hat Edge Manager 1.0 |
Unaffected:
1783502438 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.0::el9 |
||
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784194574 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el10 |
||
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784127736 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el9 |
||
| Red Hat | Red Hat Hardened Images |
Unaffected:
1.25.11-2.hum1 , < *
(rpm)
cpe:/a:redhat:hummingbird:1 |
||
| Red Hat | Red Hat Hardened Images |
Unaffected:
1.26.4-2.hum1 , < *
(rpm)
cpe:/a:redhat:hummingbird:1 |
||
| Red Hat | Red Hat Lightspeed (formerly Insights) for Runtimes 1.0 |
Unaffected:
1786483782 , < *
(rpm)
cpe:/a:redhat:lightspeed_for_runtimes:1.0::el9 |
||
| Red Hat | Red Hat Migration Toolkit 1.8 |
Unaffected:
1783914276 , < *
(rpm)
cpe:/a:redhat:rhmt:1.8::el8 |
||
| Red Hat | Red Hat Migration Toolkit for Applications 8.1 |
Unaffected:
1785171639 , < *
(rpm)
cpe:/a:redhat:migration_toolkit_applications:8.1::el9 |
||
| Red Hat | Red Hat Migration Toolkit for Applications 8.2 |
Unaffected:
1784211378 , < *
(rpm)
cpe:/a:redhat:migration_toolkit_applications:8.2::el9 |
||
| Red Hat | Red Hat multicluster global hub 1.4.2 |
Unaffected:
1784061472 , < *
(rpm)
cpe:/a:redhat:multicluster_globalhub:1.4::el9 |
||
| Red Hat | Red Hat multicluster global hub 1.6.0 |
Unaffected:
1784152046 , < *
(rpm)
cpe:/a:redhat:multicluster_globalhub:1.6::el9 |
||
| Red Hat | Red Hat OpenShift AI 2.25 |
Unaffected:
1783544461 , < *
(rpm)
cpe:/a:redhat:openshift_ai:2.25::el9 |
||
| Red Hat | Red Hat OpenShift AI 2.25 |
Unaffected:
1783946386 , < *
(rpm)
cpe:/a:redhat:openshift_ai:2.25::el9 |
||
| Red Hat | Red Hat OpenShift Builds 1.7.3 |
Unaffected:
1783057868 , < *
(rpm)
cpe:/a:redhat:openshift_builds:1.7::el9 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.19 |
Unaffected:
1786490745 , < *
(rpm)
cpe:/a:redhat:openshift:4.19::el9 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.20 |
Unaffected:
1786525840 , < *
(rpm)
cpe:/a:redhat:openshift:4.20::el9 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.21 |
Unaffected:
1786573075 , < *
(rpm)
cpe:/a:redhat:openshift:4.21::el9 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.21 |
Unaffected:
1786526139 , < *
(rpm)
cpe:/a:redhat:openshift:4.21::el9 |
||
| Red Hat | Red Hat OpenShift distributed tracing 3.10.1 |
Unaffected:
1785704547 , < *
(rpm)
cpe:/a:redhat:openshift_distributed_tracing:3.10::el9 |
||
| Red Hat | Red Hat OpenShift GitOps 1.19 |
Unaffected:
1782292352 , < *
(rpm)
cpe:/a:redhat:openshift_gitops:1.19::el8 |
||
| Red Hat | Red Hat OpenShift GitOps 1.2 |
Unaffected:
1782383826 , < *
(rpm)
cpe:/a:redhat:openshift_gitops:1.20::el9 |
||
| Red Hat | Red Hat OpenShift GitOps 1.21 |
Unaffected:
1782910941 , < *
(rpm)
cpe:/a:redhat:openshift_gitops:1.21::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.0 |
Unaffected:
1782222217 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.0::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.0 |
Unaffected:
1782223341 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.0::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.0 |
Unaffected:
1782296193 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.0::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.0 |
Unaffected:
1782222607 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.0::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.1 |
Unaffected:
1782222163 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.1::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.1 |
Unaffected:
1782223138 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.1::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.1 |
Unaffected:
1782222394 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.1::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.1 |
Unaffected:
1782222451 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.1::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.2 |
Unaffected:
1782226178 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.2::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.2 |
Unaffected:
1782224487 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.2::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.2 |
Unaffected:
1782303211 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.2::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.2 |
Unaffected:
1782224541 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.2::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.3 |
Unaffected:
1782223045 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.3::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.3 |
Unaffected:
1782222366 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.3::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.3 |
Unaffected:
1782310747 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.3::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.3 |
Unaffected:
1782222038 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.3::el9 |
||
| Red Hat | Red Hat OpenShift Workload Availability 0.12 |
Unaffected:
1785202723 , < *
(rpm)
cpe:/a:redhat:workload_availability_nhc:0.12::el9 |
||
| Red Hat | Red Hat OpenShift Workload Availability 0.13 |
Unaffected:
1785203036 , < *
(rpm)
cpe:/a:redhat:workload_availability_snr:0.13::el9 |
||
| Red Hat | Red Hat OpenShift Workload Availability 0.3 |
Unaffected:
1785203474 , < *
(rpm)
cpe:/a:redhat:workload_availability_sbr:0.3::el9 |
||
| Red Hat | Red Hat OpenShift Workload Availability 0.7 |
Unaffected:
1785203508 , < *
(rpm)
cpe:/a:redhat:workload_availability_mdr:0.7::el9 |
||
| Red Hat | Red Hat OpenShift Workload Availability 0.8 |
Unaffected:
1785203079 , < *
(rpm)
cpe:/a:redhat:workload_availability_far:0.8::el9 |
||
| Red Hat | Red Hat OpenShift Workload Availability 5.7 |
Unaffected:
1785202847 , < *
(rpm)
cpe:/a:redhat:workload_availability_nmo:5.7::el9 |
||
| Red Hat | Red Hat Satellite 6.18 |
Unaffected:
1785923308 , < *
(rpm)
cpe:/a:redhat:satellite:6.18::el9 |
||
| Red Hat | Red Hat Satellite 6.19 |
Unaffected:
1785929994 , < *
(rpm)
cpe:/a:redhat:satellite:6.19::el9 |
||
| Red Hat | Red Hat Trusted Artifact Signer 1.4 |
Unaffected:
4-1.4.2 , < *
(rpm)
Unaffected: 4-1.4.3 , < * (rpm) cpe:/a:redhat:trusted_artifact_signer:1.4::el9 |
||
| Red Hat | Red Hat Web Terminal 1.11 |
Unaffected:
1784296203 , < *
(rpm)
cpe:/a:redhat:webterminal:1.11::el9 |
||
| Red Hat | Red Hat Web Terminal 1.12 |
Unaffected:
1784247610 , < *
(rpm)
cpe:/a:redhat:webterminal:1.12::el9 |
||
| Red Hat | Red Hat Web Terminal 1.13 |
Unaffected:
1784296127 , < *
(rpm)
cpe:/a:redhat:webterminal:1.13::el9 |
||
| Red Hat | Red Hat Web Terminal 1.14 |
Unaffected:
1784296114 , < *
(rpm)
cpe:/a:redhat:webterminal:1.14::el9 |
||
| Red Hat | Red Hat Web Terminal 1.15 |
Unaffected:
1784296033 , < *
(rpm)
cpe:/a:redhat:webterminal:1.15::el9 |
||
| Red Hat | Red Hat Web Terminal 1.16 |
Unaffected:
1784295767 , < *
(rpm)
cpe:/a:redhat:webterminal:1.16::el9 |
||
| Red Hat | Assisted Installer for Red Hat OpenShift Container Platform 2 |
cpe:/a:redhat:assisted_installer:2
|
||
| Red Hat | cert-manager Operator for Red Hat OpenShift |
cpe:/a:redhat:cert_manager:1
|
||
| Red Hat | Confidential Compute Attestation |
cpe:/a:redhat:confidential_compute_attestation:1
|
||
| Red Hat | Custom Metric Autoscaler operator for Red Hat Openshift |
cpe:/a:redhat:openshift_custom_metrics_autoscaler:2
|
||
| Red Hat | Deployment Validation Operator |
cpe:/a:redhat:deployment_validator_operator
|
||
| Red Hat | External Secrets Operator for Red Hat OpenShift |
cpe:/a:redhat:external_secrets_operator:1
|
||
| Red Hat | Fence Agents Remediation Operator |
cpe:/a:redhat:workload_availability_far:0
|
||
| Red Hat | File Integrity Operator |
cpe:/a:redhat:openshift_file_integrity_operator:1
|
||
| Red Hat | Gatekeeper 3 |
cpe:/a:redhat:gatekeeper:3
|
||
| Red Hat | Logical Volume Manager Storage |
cpe:/a:redhat:lvms:4
|
||
| Red Hat | Machine Deletion Remediation Operator |
cpe:/a:redhat:workload_availability_mdr:0
|
||
| Red Hat | mirror registry for Red Hat OpenShift |
cpe:/a:redhat:mirror_registry:1
|
||
| Red Hat | mirror registry for Red Hat OpenShift 2 |
cpe:/a:redhat:mirror_registry:2
|
||
| Red Hat | Multiarch Tuning Operator |
cpe:/a:redhat:multiarch_tuning_operator
|
||
| Red Hat | Multicluster Engine for Kubernetes |
cpe:/a:redhat:multicluster_engine
|
||
| Red Hat | Multicluster Global Hub |
cpe:/a:redhat:multicluster_globalhub
|
||
| Red Hat | Network Observability Operator |
cpe:/a:redhat:network_observ_optr:1
|
||
| Red Hat | Node HealthCheck Operator |
cpe:/a:redhat:workload_availability_nhc:0
|
||
| Red Hat | OpenShift Developer Tools and Services |
cpe:/a:redhat:ocp_tools
|
||
| Red Hat | OpenShift Lightspeed |
cpe:/a:redhat:openshift_lightspeed
|
||
| Red Hat | OpenShift Pipelines |
cpe:/a:redhat:openshift_pipelines:1
|
||
| Red Hat | OpenShift Serverless |
cpe:/a:redhat:serverless:1
|
||
| Red Hat | OpenShift Service Mesh 2 |
cpe:/a:redhat:service_mesh:2
|
||
| Red Hat | OpenShift Service Mesh 3 |
cpe:/a:redhat:service_mesh:3
|
||
| Red Hat | Power monitoring for Red Hat OpenShift |
cpe:/a:redhat:openshift_power_monitoring
|
||
| Red Hat | Red Hat 3scale API Management Platform 2 |
cpe:/a:redhat:red_hat_3scale_amp:2
|
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 |
cpe:/a:redhat:acm:2
|
||
| Red Hat | Red Hat AMQ Clients |
cpe:/a:redhat:amq_clients:2023
|
||
| Red Hat | Red Hat Ansible Automation Platform 2 |
cpe:/a:redhat:ansible_automation_platform:2
|
||
| Red Hat | Red Hat build of Apicurio Registry 2 |
cpe:/a:redhat:service_registry:2
|
||
| Red Hat | Red Hat Ceph Storage 5 |
cpe:/a:redhat:ceph_storage:5
|
||
| Red Hat | Red Hat Ceph Storage 6 |
cpe:/a:redhat:ceph_storage:6
|
||
| Red Hat | Red Hat Ceph Storage 9 |
cpe:/a:redhat:ceph_storage:9
|
||
| Red Hat | Red Hat Certification Program for Red Hat Enterprise Linux 9 |
cpe:/a:redhat:certifications:9
|
||
| Red Hat | Red Hat Connectivity Link 1 |
cpe:/a:redhat:connectivity_link:1
|
||
| Red Hat | Red Hat Enterprise Linux 10 |
cpe:/o:redhat:enterprise_linux:10
|
||
| Red Hat | Red Hat Enterprise Linux 7 |
cpe:/o:redhat:enterprise_linux:7
|
||
| Red Hat | Red Hat Enterprise Linux 8 |
cpe:/o:redhat:enterprise_linux:8
|
||
| Red Hat | Red Hat Enterprise Linux 9 |
cpe:/o:redhat:enterprise_linux:9
|
||
| Red Hat | Red Hat Enterprise Linux AI (RHEL AI) 3 |
cpe:/a:redhat:enterprise_linux_ai:3
|
||
| Red Hat | Red Hat OpenShift AI (RHOAI) |
cpe:/a:redhat:openshift_ai
|
||
| Red Hat | Red Hat OpenShift Cluster Manager CLI |
cpe:/a:redhat:openshift_cluster_manager_cli:1
|
||
| Red Hat | Red Hat OpenShift Container Platform 4 |
cpe:/a:redhat:openshift:4
|
||
| Red Hat | Red Hat Openshift Data Foundation 4 |
cpe:/a:redhat:openshift_data_foundation:4
|
||
| Red Hat | Red Hat OpenShift Dev Spaces |
cpe:/a:redhat:openshift_devspaces:3
|
||
| Red Hat | Red Hat OpenShift Dev Workspaces Operator |
cpe:/a:redhat:devworkspace
|
||
| Red Hat | Red Hat OpenShift for Windows Containers |
cpe:/a:redhat:windows_machine_config
|
||
| Red Hat | Red Hat OpenShift on AWS |
cpe:/a:redhat:openshift_service_on_aws:1
|
||
| Red Hat | Red Hat OpenShift Virtualization 4 |
cpe:/a:redhat:container_native_virtualization:4
|
||
| Red Hat | Red Hat OpenStack Platform 16.2 |
cpe:/a:redhat:openstack:16.2
|
||
| Red Hat | Red Hat OpenStack Platform 17.1 |
cpe:/a:redhat:openstack:17.1
|
||
| Red Hat | Red Hat OpenStack Platform 18.0 |
cpe:/a:redhat:openstack:18.0
|
||
| Red Hat | Red Hat Quay 3 |
cpe:/a:redhat:quay:3
|
||
| Red Hat | Red Hat Satellite 6 |
cpe:/a:redhat:satellite:6
|
||
| Red Hat | Red Hat Service Interconnect 1 |
cpe:/a:redhat:service_interconnect:1
|
||
| Red Hat | Red Hat Service Interconnect 2 |
cpe:/a:redhat:service_interconnect:2
|
||
| Red Hat | Security Profiles Operator |
cpe:/a:redhat:openshift_security_profiles_operator:1
|
||
| Red Hat | Service Telemetry Framework 1.5 |
cpe:/a:redhat:stf:1.5
|
||
| Red Hat | Zero Trust Workload Identity Manager |
cpe:/a:redhat:zero_trust_workload_identity_manager:1
|
||
| Red Hat | Zero Trust Workload Identity Manager - Tech Preview |
cpe:/a:redhat:zero_trust_workload_identity_manager:0
|
Credits
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-33811",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-05-08T14:25:39.702568Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-05-08T14:25:43.896Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"affected": [
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:cryostat:4::el9"
],
"defaultStatus": "affected",
"packageName": "cryostat/cryostat-storage-rhel9",
"product": "Cryostat 4 on RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "4.2.0-19",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.5::el8"
],
"defaultStatus": "affected",
"packageName": "receptor",
"product": "Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.6.6-1.el8ap",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.5::el8"
],
"defaultStatus": "affected",
"packageName": "automation-gateway-proxy",
"product": "Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:2.5.10-7.el8ap",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.5::el9"
],
"defaultStatus": "affected",
"packageName": "receptor",
"product": "Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.6.6-1.el9ap",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.5::el9"
],
"defaultStatus": "affected",
"packageName": "automation-gateway-proxy",
"product": "Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:2.6.17-2.el9ap",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.6::el10"
],
"defaultStatus": "affected",
"packageName": "receptor",
"product": "Red Hat Ansible Automation Platform 2.6 for RHEL 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.6.6-1.el10ap",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.6::el9"
],
"defaultStatus": "affected",
"packageName": "receptor",
"product": "Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.6.6-1.el9ap",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.6::el9"
],
"defaultStatus": "affected",
"packageName": "automation-gateway-proxy",
"product": "Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:2.6.17-2.el9ap",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "opentelemetry-collector",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.152.1-1.el10_2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "golang-github-openprinting-ipp-usb",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.9.27-7.el10_2.2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "git-lfs",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:3.7.1-5.el10_2.6",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "yggdrasil",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.4.9.2-1.el10_2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "rhc-worker-playbook",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.2.10-1.el10_2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"packageName": "delve",
"product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.26.1-1.el10_0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"packageName": "yggdrasil",
"product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.4.7-5.el10_0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"packageName": "opentelemetry-collector",
"product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.152.1-1.el10_0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"packageName": "rhc-worker-playbook",
"product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.2.3-6.el10_0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:rhel_els:7"
],
"defaultStatus": "affected",
"packageName": "rhc-worker-script",
"product": "Red Hat Enterprise Linux 7 Extended Lifecycle Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.11-1.el7_9",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:8"
],
"defaultStatus": "affected",
"packageName": "rhc",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1:0.2.5-8.el8_10",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:8"
],
"defaultStatus": "affected",
"packageName": "container-tools:rhel8",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "8100020260709093628.afee755d",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:8"
],
"defaultStatus": "affected",
"packageName": "git-lfs",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:3.4.1-12.el8_10",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "opentelemetry-collector",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.152.1-1.el9_8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "oci-seccomp-bpf-hook",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.2.11-2.el9_8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "git-lfs",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:3.7.1-4.el9_8.2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.4"
],
"defaultStatus": "affected",
"packageName": "opentelemetry-collector",
"product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.152.1-1.el9_4",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus:9.6"
],
"defaultStatus": "affected",
"packageName": "opentelemetry-collector",
"product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.152.1-1.el9_6",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.19::el8"
],
"defaultStatus": "affected",
"packageName": "cri-tools",
"product": "Red Hat OpenShift Container Platform 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.32.0-6.el9",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.19::el8"
],
"defaultStatus": "affected",
"packageName": "openshift",
"product": "Red Hat OpenShift Container Platform 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.19::el8"
],
"defaultStatus": "affected",
"packageName": "openshift-clients",
"product": "Red Hat OpenShift Container Platform 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.19::el8"
],
"defaultStatus": "affected",
"packageName": "ose-aws-ecr-image-credential-provider",
"product": "Red Hat OpenShift Container Platform 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openstack:16.2::el8"
],
"defaultStatus": "affected",
"packageName": "collectd-sensubility",
"product": "Red Hat OpenStack Platform 16.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.2.1-1.1.el8ost",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openstack:16.2::el8"
],
"defaultStatus": "affected",
"packageName": "etcd",
"product": "Red Hat OpenStack Platform 16.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:3.3.23-22.el8ost",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:18.0::el9"
],
"defaultStatus": "affected",
"packageName": "golang-github-openstack-k8s-operators-os-diff",
"product": "Red Hat OpenStack Services on OpenShift 18.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.1.1-18.0.20260602234716.a95ae05.el9ost",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite:6.16::el8"
],
"defaultStatus": "affected",
"packageName": "yggdrasil-worker-forwarder",
"product": "Red Hat Satellite 6.16 for RHEL 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.0.4-1.el8sat",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite:6.16::el9"
],
"defaultStatus": "affected",
"packageName": "yggdrasil-worker-forwarder",
"product": "Red Hat Satellite 6.16 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.0.4-1.el9sat",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite:6.17::el9"
],
"defaultStatus": "affected",
"packageName": "yggdrasil-worker-forwarder",
"product": "Red Hat Satellite 6.17 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.0.4-1.el9sat",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite:6.18::el9"
],
"defaultStatus": "affected",
"packageName": "yggdrasil-worker-forwarder",
"product": "Red Hat Satellite 6.18 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.0.4-1.el9sat",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite:6.19::el9"
],
"defaultStatus": "affected",
"packageName": "yggdrasil-worker-forwarder",
"product": "Red Hat Satellite 6.19 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.0.4-1.el9sat",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.0::el9"
],
"defaultStatus": "affected",
"packageName": "flightctl",
"product": "RHEM 1.0 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.0.3-1.el9em",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el10"
],
"defaultStatus": "affected",
"packageName": "flightctl",
"product": "RHEM 1.1 for RHEL 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.1.3-1.el10em",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el9"
],
"defaultStatus": "affected",
"packageName": "flightctl",
"product": "RHEM 1.1 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.1.3-1.el9em",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:amq_streams:3.2::el9"
],
"defaultStatus": "affected",
"packageName": "golang-github",
"product": "Streams for Apache Kafka 3.2.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "danielqsj-kafka_exporter",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_compliance_operator:1::el9"
],
"defaultStatus": "affected",
"packageName": "compliance/openshift-compliance-operator-bundle",
"product": "Compliance Operator 1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786380082",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:logging:6.0::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-logging/eventrouter-rhel9",
"product": "Logging for Red Hat OpenShift 6.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1785418851",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:logging:6.2::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-logging/eventrouter-rhel9",
"product": "Logging for Red Hat OpenShift 6.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784747813",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:logging:6.4::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-logging/eventrouter-rhel9",
"product": "Logging Subsystem for Red Hat OpenShift 6.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782408807",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:logging:6.5::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-logging/logging-loki-rhel9",
"product": "Logging Subsystem for Red Hat OpenShift 6.5",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786645248",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.10::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/discovery-rhel9",
"product": "multicluster engine for Kubernetes 2.10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784915379",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.11::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/addon-manager-rhel9",
"product": "multicluster engine for Kubernetes 2.11.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786911941",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.11::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/backplane-rhel9-operator",
"product": "multicluster engine for Kubernetes 2.11.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786911952",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.11::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/clusterlifecycle-state-metrics-rhel9",
"product": "multicluster engine for Kubernetes 2.11.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786911945",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.11::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/discovery-rhel9",
"product": "multicluster engine for Kubernetes 2.11.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786911975",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.11::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/hypershift-addon-rhel9-operator",
"product": "multicluster engine for Kubernetes 2.11.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786912006",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.11::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/managedcluster-import-controller-rhel9",
"product": "multicluster engine for Kubernetes 2.11.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786911973",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.11::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/multicloud-manager-rhel9",
"product": "multicluster engine for Kubernetes 2.11.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786911950",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.11::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/placement-rhel9",
"product": "multicluster engine for Kubernetes 2.11.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786911984",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.11::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/registration-operator-rhel9",
"product": "multicluster engine for Kubernetes 2.11.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786911984",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.11::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/work-rhel9",
"product": "multicluster engine for Kubernetes 2.11.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786907276",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.6::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/discovery-rhel9",
"product": "multicluster engine for Kubernetes 2.6",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783985999",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.8::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/discovery-rhel9",
"product": "multicluster engine for Kubernetes 2.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784306906",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_globalhub:1.5::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
"product": "Multicluster Global Hub 1.5.6",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784127491",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_globalhub:1.7::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
"product": "Multicluster Global Hub 1.7.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784768332",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1785775948",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_api_data_protection:1.3::el9"
],
"defaultStatus": "affected",
"packageName": "oadp/oadp-velero-rhel9",
"product": "OpenShift API for Data Protection 1.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1785180878",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_api_data_protection:1.6::el9"
],
"defaultStatus": "affected",
"packageName": "oadp/oadp-velero-rhel9",
"product": "OpenShift API for Data Protection 1.6",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784058822",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:source_to_image:1.6::el8"
],
"defaultStatus": "affected",
"packageName": "source-to-image/source-to-image-rhel8",
"product": "OpenShift Developer Tools and Services 1.6.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784727697",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:source_to_image:1.6::el8"
],
"defaultStatus": "affected",
"packageName": "source-to-image/source-to-image-rhel9",
"product": "OpenShift Developer Tools and Services 1.6.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784728036",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.16::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/klusterlet-addon-controller-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.16",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786908301",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4.10::el8"
],
"defaultStatus": "affected",
"packageName": "advanced-cluster-security/rhacs-main-rhel8",
"product": "Red Hat Advanced Cluster Security for Kubernetes 4.10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783357140",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4.11::el9"
],
"defaultStatus": "affected",
"packageName": "advanced-cluster-security/rhacs-main-rhel9",
"product": "Red Hat Advanced Cluster Security for Kubernetes 4.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783352589",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4.9::el8"
],
"defaultStatus": "affected",
"packageName": "advanced-cluster-security/rhacs-main-rhel8",
"product": "Red Hat Advanced Cluster Security for Kubernetes 4.9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783357116",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.6::el9"
],
"defaultStatus": "affected",
"packageName": "ansible-automation-platform-26/receptor-rhel9",
"product": "Red Hat Ansible Automation Platform 2.6",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783962464",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:rhdh:1.9::el9"
],
"defaultStatus": "affected",
"packageName": "rhdh/rhdh-rhel9-operator",
"product": "Red Hat Developer Hub 1.9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782767215",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.0::el9"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-ui-rhel9",
"product": "Red Hat Edge Manager 1.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783502438",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el10"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-ui-rhel10",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784194574",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el9"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-ui-rhel9",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784127736",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:hummingbird:1"
],
"defaultStatus": "affected",
"packageName": "golang1-25-main",
"product": "Red Hat Hardened Images",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1.25.11-2.hum1",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:hummingbird:1"
],
"defaultStatus": "affected",
"packageName": "golang1-26-main",
"product": "Red Hat Hardened Images",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1.26.4-2.hum1",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:lightspeed_for_runtimes:1.0::el9"
],
"defaultStatus": "affected",
"packageName": "rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator",
"product": "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786483782",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:rhmt:1.8::el8"
],
"defaultStatus": "affected",
"packageName": "rhmtc/openshift-migration-registry-rhel8",
"product": "Red Hat Migration Toolkit 1.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783914276",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:migration_toolkit_applications:8.1::el9"
],
"defaultStatus": "affected",
"packageName": "mta/mta-cli-rhel9",
"product": "Red Hat Migration Toolkit for Applications 8.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1785171639",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:migration_toolkit_applications:8.2::el9"
],
"defaultStatus": "affected",
"packageName": "mta/mta-cli-rhel9",
"product": "Red Hat Migration Toolkit for Applications 8.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784211378",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_globalhub:1.4::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
"product": "Red Hat multicluster global hub 1.4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784061472",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_globalhub:1.6::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
"product": "Red Hat multicluster global hub 1.6.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784152046",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_ai:2.25::el9"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-kueue-controller-rhel9",
"product": "Red Hat OpenShift AI 2.25",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783544461",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_ai:2.25::el9"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-training-operator-rhel9",
"product": "Red Hat OpenShift AI 2.25",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783946386",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_builds:1.7::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-builds/openshift-builds-waiters-rhel9",
"product": "Red Hat OpenShift Builds 1.7.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783057868",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-ansible-rhel9-operator",
"product": "Red Hat OpenShift Container Platform 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786490745",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-ansible-rhel9-operator",
"product": "Red Hat OpenShift Container Platform 4.20",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786525840",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.21::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-hypershift-rhel9",
"product": "Red Hat OpenShift Container Platform 4.21",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786573075",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.21::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-ansible-rhel9-operator",
"product": "Red Hat OpenShift Container Platform 4.21",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786526139",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"
],
"defaultStatus": "affected",
"packageName": "rhosdt/opentelemetry-rhel9-operator",
"product": "Red Hat OpenShift distributed tracing 3.10.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1785704547",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_gitops:1.19::el8"
],
"defaultStatus": "affected",
"packageName": "openshift-gitops-1/dex-rhel8",
"product": "Red Hat OpenShift GitOps 1.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782292352",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_gitops:1.20::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-gitops-1/dex-rhel9",
"product": "Red Hat OpenShift GitOps 1.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782383826",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_gitops:1.21::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-gitops-1/dex-rhel9",
"product": "Red Hat OpenShift GitOps 1.21",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782910941",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.0::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-cni-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782222217",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.0::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-pilot-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782223341",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.0::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-proxyv2-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782296193",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.0::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-rhel9-operator",
"product": "Red Hat OpenShift Service Mesh 3.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782222607",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.1::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-cni-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782222163",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.1::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-pilot-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782223138",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.1::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-proxyv2-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782222394",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.1::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-rhel9-operator",
"product": "Red Hat OpenShift Service Mesh 3.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782222451",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.2::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-cni-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782226178",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.2::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-pilot-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782224487",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.2::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-proxyv2-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782303211",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.2::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-rhel9-operator",
"product": "Red Hat OpenShift Service Mesh 3.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782224541",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-cni-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782223045",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-pilot-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782222366",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-proxyv2-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782310747",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-rhel9-operator",
"product": "Red Hat OpenShift Service Mesh 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782222038",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:workload_availability_nhc:0.12::el9"
],
"defaultStatus": "affected",
"packageName": "workload-availability/node-healthcheck-rhel9-operator",
"product": "Red Hat OpenShift Workload Availability 0.12",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1785202723",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:workload_availability_snr:0.13::el9"
],
"defaultStatus": "affected",
"packageName": "workload-availability/self-node-remediation-rhel9-operator",
"product": "Red Hat OpenShift Workload Availability 0.13",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1785203036",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:workload_availability_sbr:0.3::el9"
],
"defaultStatus": "affected",
"packageName": "workload-availability/storage-based-remediation-rhel9-operator",
"product": "Red Hat OpenShift Workload Availability 0.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1785203474",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:workload_availability_mdr:0.7::el9"
],
"defaultStatus": "affected",
"packageName": "workload-availability/machine-deletion-remediation-rhel9-operator",
"product": "Red Hat OpenShift Workload Availability 0.7",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1785203508",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:workload_availability_far:0.8::el9"
],
"defaultStatus": "affected",
"packageName": "workload-availability/fence-agents-remediation-rhel9-operator",
"product": "Red Hat OpenShift Workload Availability 0.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1785203079",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:workload_availability_nmo:5.7::el9"
],
"defaultStatus": "affected",
"packageName": "workload-availability/node-maintenance-rhel9-operator",
"product": "Red Hat OpenShift Workload Availability 5.7",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1785202847",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:satellite:6.18::el9"
],
"defaultStatus": "affected",
"packageName": "satellite/iop-vmaas-rhel9",
"product": "Red Hat Satellite 6.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1785923308",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:satellite:6.19::el9"
],
"defaultStatus": "affected",
"packageName": "satellite/iop-vmaas-rhel9",
"product": "Red Hat Satellite 6.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1785929994",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.4::el9"
],
"defaultStatus": "affected",
"packageName": "conforma-cli-stack-v1",
"product": "Red Hat Trusted Artifact Signer 1.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "4-1.4.2",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "4-1.4.3",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:webterminal:1.11::el9"
],
"defaultStatus": "affected",
"packageName": "web-terminal/web-terminal-exec-rhel9",
"product": "Red Hat Web Terminal 1.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784296203",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:webterminal:1.12::el9"
],
"defaultStatus": "affected",
"packageName": "web-terminal/web-terminal-exec-rhel9",
"product": "Red Hat Web Terminal 1.12",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784247610",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:webterminal:1.13::el9"
],
"defaultStatus": "affected",
"packageName": "web-terminal/web-terminal-exec-rhel9",
"product": "Red Hat Web Terminal 1.13",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784296127",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:webterminal:1.14::el9"
],
"defaultStatus": "affected",
"packageName": "web-terminal/web-terminal-exec-rhel9",
"product": "Red Hat Web Terminal 1.14",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784296114",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:webterminal:1.15::el9"
],
"defaultStatus": "affected",
"packageName": "web-terminal/web-terminal-exec-rhel9",
"product": "Red Hat Web Terminal 1.15",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784296033",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:webterminal:1.16::el9"
],
"defaultStatus": "affected",
"packageName": "web-terminal/web-terminal-exec-rhel9",
"product": "Red Hat Web Terminal 1.16",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784295767",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:assisted_installer:2"
],
"defaultStatus": "affected",
"packageName": "rhai/assisted-installer-rhel9",
"product": "Assisted Installer for Red Hat OpenShift Container Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:cert_manager:1"
],
"defaultStatus": "affected",
"packageName": "cert-manager/jetstack-cert-manager-rhel9",
"product": "cert-manager Operator for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:confidential_compute_attestation:1"
],
"defaultStatus": "affected",
"packageName": "build-of-trustee/trustee-rhel9-operator",
"product": "Confidential Compute Attestation",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:confidential_compute_attestation:1"
],
"defaultStatus": "affected",
"packageName": "confidential-compute-attestation-tech-preview/trustee-rhel9-operator",
"product": "Confidential Compute Attestation",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:confidential_compute_attestation:1"
],
"defaultStatus": "affected",
"packageName": "openshift-sandboxed-containers/osc-monitor-rhel9",
"product": "Confidential Compute Attestation",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_custom_metrics_autoscaler:2"
],
"defaultStatus": "unaffected",
"packageName": "custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9",
"product": "Custom Metric Autoscaler operator for Red Hat Openshift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:deployment_validator_operator"
],
"defaultStatus": "affected",
"packageName": "dvo/deployment-validation-rhel8-operator",
"product": "Deployment Validation Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:external_secrets_operator:1"
],
"defaultStatus": "affected",
"packageName": "external-secrets-operator/external-secrets-rhel9",
"product": "External Secrets Operator for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:workload_availability_far:0"
],
"defaultStatus": "affected",
"packageName": "redhat-user-workloads/far-operator-0-8",
"product": "Fence Agents Remediation Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_file_integrity_operator:1"
],
"defaultStatus": "affected",
"packageName": "compliance/openshift-compliance-operator-bundle",
"product": "File Integrity Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:gatekeeper:3"
],
"defaultStatus": "affected",
"packageName": "gatekeeper/gatekeeper-rhel9-operator",
"product": "Gatekeeper 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:lvms:4"
],
"defaultStatus": "unaffected",
"packageName": "lvms4/lvms-rhel9-operator",
"product": "Logical Volume Manager Storage",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:lvms:4"
],
"defaultStatus": "affected",
"packageName": "lvms4/topolvm-rhel8",
"product": "Logical Volume Manager Storage",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:lvms:4"
],
"defaultStatus": "unaffected",
"packageName": "lvms4/topolvm-rhel9",
"product": "Logical Volume Manager Storage",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:workload_availability_mdr:0"
],
"defaultStatus": "affected",
"packageName": "redhat-user-workloads/mdr-operator-0-7",
"product": "Machine Deletion Remediation Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:mirror_registry:1"
],
"defaultStatus": "affected",
"packageName": "openshift/mirror-registry-rhel8",
"product": "mirror registry for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:mirror_registry:2"
],
"defaultStatus": "unaffected",
"packageName": "openshift/mirror-registry-rhel8",
"product": "mirror registry for Red Hat OpenShift 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multiarch_tuning_operator"
],
"defaultStatus": "affected",
"packageName": "multiarch-tuning/multiarch-tuning-rhel9-operator",
"product": "Multiarch Tuning Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multicluster_engine"
],
"defaultStatus": "unknown",
"packageName": "multicluster-engine/maestro-rhel9",
"product": "Multicluster Engine for Kubernetes",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multicluster_globalhub"
],
"defaultStatus": "affected",
"packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel8",
"product": "Multicluster Global Hub",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:network_observ_optr:1"
],
"defaultStatus": "affected",
"packageName": "network-observability/network-observability-cli-rhel9",
"product": "Network Observability Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:workload_availability_nhc:0"
],
"defaultStatus": "affected",
"packageName": "node-healthcheck-operator-tech-preview/node-healthcheck-rhel8-operator",
"product": "Node HealthCheck Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:workload_availability_nhc:0"
],
"defaultStatus": "affected",
"packageName": "redhat-user-workloads/nhc-operator-0-12",
"product": "Node HealthCheck Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:workload_availability_nhc:0"
],
"defaultStatus": "affected",
"packageName": "workload-availability/node-healthcheck-rhel8-operator",
"product": "Node HealthCheck Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ocp_tools"
],
"defaultStatus": "affected",
"packageName": "helm",
"product": "OpenShift Developer Tools and Services",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_lightspeed"
],
"defaultStatus": "affected",
"packageName": "openshift-lightspeed/lightspeed-rhel9-operator",
"product": "OpenShift Lightspeed",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_pipelines:1"
],
"defaultStatus": "affected",
"packageName": "openshift-pipelines-client",
"product": "OpenShift Pipelines",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:serverless:1"
],
"defaultStatus": "affected",
"packageName": "kn-workflow-plugin",
"product": "OpenShift Serverless",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:serverless:1"
],
"defaultStatus": "affected",
"packageName": "openshift-serverless-1/kn-plugin-event-sender-rhel9",
"product": "OpenShift Serverless",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:serverless:1"
],
"defaultStatus": "affected",
"packageName": "openshift-serverless-clients",
"product": "OpenShift Serverless",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_mesh:2"
],
"defaultStatus": "unaffected",
"packageName": "openshift-golang-builder-container",
"product": "OpenShift Service Mesh 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_mesh:2"
],
"defaultStatus": "unaffected",
"packageName": "openshift-service-mesh/kiali-rhel8",
"product": "OpenShift Service Mesh 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_mesh:3"
],
"defaultStatus": "unaffected",
"packageName": "openshift-service-mesh/kiali-rhel9",
"product": "OpenShift Service Mesh 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_power_monitoring"
],
"defaultStatus": "affected",
"packageName": "openshift-power-monitoring/kepler-rhel9",
"product": "Power monitoring for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:red_hat_3scale_amp:2"
],
"defaultStatus": "unaffected",
"packageName": "3scale-amp2/3scale-rhel7-operator",
"product": "Red Hat 3scale API Management Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:red_hat_3scale_amp:2"
],
"defaultStatus": "unaffected",
"packageName": "3scale-amp2/3scale-rhel9-operator",
"product": "Red Hat 3scale API Management Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "unknown",
"packageName": "rhacm2/acm-governance-policy-addon-controller-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "unknown",
"packageName": "rhacm2/acm-governance-policy-framework-addon-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "unknown",
"packageName": "rhacm2/config-policy-controller-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "unknown",
"packageName": "rhacm2/governance-policy-propagator-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "affected",
"packageName": "rhacm2/subctl-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:amq_clients:2023"
],
"defaultStatus": "unaffected",
"packageName": "python39-qpid-proton",
"product": "Red Hat AMQ Clients",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:amq_clients:2023"
],
"defaultStatus": "unaffected",
"packageName": "qpid-proton",
"product": "Red Hat AMQ Clients",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "ansible-automation-platform/platform-operator-bundle",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "automation-gateway-proxy-openssl30",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "automation-gateway-proxy-openssl32",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "python3.11-galaxy-ng",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "python3.11-grpcio",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "python3.12-galaxy-ng",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "python3.12-grpcio",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "python3x-grpcio",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "python-grpcio",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_registry:2"
],
"defaultStatus": "affected",
"packageName": "apicurio/apicurio-registry-rhel8-operator",
"product": "Red Hat build of Apicurio Registry 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_registry:2"
],
"defaultStatus": "affected",
"packageName": "apicurio/apicurio-registry-rhel9-operator",
"product": "Red Hat build of Apicurio Registry 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ceph_storage:5"
],
"defaultStatus": "affected",
"packageName": "rhceph/snmp-notifier-rhel8",
"product": "Red Hat Ceph Storage 5",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ceph_storage:6"
],
"defaultStatus": "affected",
"packageName": "rhceph/snmp-notifier-rhel9",
"product": "Red Hat Ceph Storage 6",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ceph_storage:9"
],
"defaultStatus": "affected",
"packageName": "rhceph/alloy-rhel10",
"product": "Red Hat Ceph Storage 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:certifications:9"
],
"defaultStatus": "affected",
"packageName": "redhat-certification-preflight",
"product": "Red Hat Certification Program for Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:connectivity_link:1"
],
"defaultStatus": "affected",
"packageName": "rhcl-1/rhcl-operator-bundle",
"product": "Red Hat Connectivity Link 1",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "buildah",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "butane",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "conmon",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "delve",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "go-fdo-client",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "go-fdo-server",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "golang",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "gpsd",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "grafana",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "grafana-pcp",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "gvisor-tap-vsock",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "image-builder",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "oci-seccomp-bpf-hook",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "podman",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "rhc",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "rhel10/bootc-image-builder",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "rhel10-eus/rhel-10.0-bootc-image-builder",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "skopeo",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "toolbox",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "trustee",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "trustee-guest-components",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "yggdrasil-worker-package-manager",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:7"
],
"defaultStatus": "unaffected",
"packageName": "host-metering",
"product": "Red Hat Enterprise Linux 7",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:7"
],
"defaultStatus": "unaffected",
"packageName": "rhc",
"product": "Red Hat Enterprise Linux 7",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "affected",
"packageName": "go-toolset:rhel8/golang",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "grafana",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "grafana-pcp",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "weldr-client",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "buildah",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "butane",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "conmon",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "containernetworking-plugins",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "golang",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "gpsd-minimal",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "grafana",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "grafana-pcp",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "gvisor-tap-vsock",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "image-builder",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "rhc",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "rhel9/bootc-image-builder",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "rhel9-eus/rhel-9.6-bootc-image-builder",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "runc",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "skopeo",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "toolbox",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "trustee-guest-components",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "weldr-client",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux_ai:3"
],
"defaultStatus": "affected",
"packageName": "golang",
"product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-ai-gateway-payload-processing-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-codeflare-operator-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-data-science-pipelines-argo-argoexec-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-data-science-pipelines-operator-controller-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-feast-operator-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-kf-notebook-controller-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-kserve-llmisvc-controller-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-kube-auth-proxy-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-kuberay-operator-controller-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-llama-stack-k8s-operator-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-llm-d-batch-gateway-apiserver-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-llm-d-batch-gateway-gc-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-llm-d-batch-gateway-processor-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-llm-d-inference-scheduler-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-llm-d-routing-sidecar-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-maas-api-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-mlflow-operator-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-ml-pipelines-api-server-v2-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-ml-pipelines-driver-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-ml-pipelines-launcher-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-mm-rest-proxy-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-mod-arch-automl-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-mod-arch-autorag-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-mod-arch-eval-hub-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-mod-arch-gen-ai-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-mod-arch-maas-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-mod-arch-mlflow-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-mod-arch-model-registry-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-model-controller-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-modelmesh-runtime-adapter-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-modelmesh-serving-controller-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-model-registry-operator-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-model-registry-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-model-serving-api-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-notebook-controller-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-rhaii-cluster-validator-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-rhel8-operator",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-rhel9-operator",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-trainer-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-trustyai-service-operator-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-workload-variant-autoscaler-controller-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/rhai-cli-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_cluster_manager_cli:1"
],
"defaultStatus": "affected",
"packageName": "ocm-cli-clients/ocm-cli-rhel9",
"product": "Red Hat OpenShift Cluster Manager CLI",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "butane",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "conmon",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "conmon-rs",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "containernetworking-plugins",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "golang-github-prometheus-promu",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "kata-containers",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/frr-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-ansible-operator",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-node",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-sdn-rhel7",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-sdn-rhel8",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-sdn-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift-golang-builder-container",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "ose-azure-acr-image-credential-provider",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "ose-gcp-gcr-image-credential-provider",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "runc",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "skopeo",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4"
],
"defaultStatus": "unaffected",
"packageName": "ocs4/cephcsi-rhel8",
"product": "Red Hat Openshift Data Foundation 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4"
],
"defaultStatus": "unaffected",
"packageName": "odf4/cephcsi-rhel8",
"product": "Red Hat Openshift Data Foundation 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4"
],
"defaultStatus": "unaffected",
"packageName": "odf4/cephcsi-rhel9",
"product": "Red Hat Openshift Data Foundation 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_devspaces:3"
],
"defaultStatus": "affected",
"packageName": "devspaces/udi-rhel9",
"product": "Red Hat OpenShift Dev Spaces",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:devworkspace"
],
"defaultStatus": "affected",
"packageName": "devworkspace/devworkspace-rhel9-operator",
"product": "Red Hat OpenShift Dev Workspaces Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:windows_machine_config"
],
"defaultStatus": "unaffected",
"packageName": "openshift4-wincw/windows-machine-config-rhel9-operator",
"product": "Red Hat OpenShift for Windows Containers",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_service_on_aws:1"
],
"defaultStatus": "affected",
"packageName": "rosa",
"product": "Red Hat OpenShift on AWS",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:container_native_virtualization:4"
],
"defaultStatus": "unaffected",
"packageName": "container-native-virtualization/kubevirt-apiserver-proxy-rhel9",
"product": "Red Hat OpenShift Virtualization 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:container_native_virtualization:4"
],
"defaultStatus": "unaffected",
"packageName": "container-native-virtualization/virt-api-rhel9",
"product": "Red Hat OpenShift Virtualization 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:container_native_virtualization:4"
],
"defaultStatus": "affected",
"packageName": "kubevirt",
"product": "Red Hat OpenShift Virtualization 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:container_native_virtualization:4"
],
"defaultStatus": "affected",
"packageName": "openshift-golang-builder-container",
"product": "Red Hat OpenShift Virtualization 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:16.2"
],
"defaultStatus": "affected",
"packageName": "golang-github-infrawatch-apputils",
"product": "Red Hat OpenStack Platform 16.2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:16.2"
],
"defaultStatus": "affected",
"packageName": "golang-qpid-apache",
"product": "Red Hat OpenStack Platform 16.2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:16.2"
],
"defaultStatus": "unaffected",
"packageName": "qpid-proton",
"product": "Red Hat OpenStack Platform 16.2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:16.2"
],
"defaultStatus": "affected",
"packageName": "rhosp-rhel8/osp-director-agent",
"product": "Red Hat OpenStack Platform 16.2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:17.1"
],
"defaultStatus": "affected",
"packageName": "collectd-libpod-stats",
"product": "Red Hat OpenStack Platform 17.1",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:17.1"
],
"defaultStatus": "affected",
"packageName": "etcd",
"product": "Red Hat OpenStack Platform 17.1",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:17.1"
],
"defaultStatus": "affected",
"packageName": "golang-github-infrawatch-apputils",
"product": "Red Hat OpenStack Platform 17.1",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:17.1"
],
"defaultStatus": "affected",
"packageName": "golang-qpid-apache",
"product": "Red Hat OpenStack Platform 17.1",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:17.1"
],
"defaultStatus": "unaffected",
"packageName": "qpid-proton",
"product": "Red Hat OpenStack Platform 17.1",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:17.1"
],
"defaultStatus": "affected",
"packageName": "rhosp-rhel9/osp-director-agent",
"product": "Red Hat OpenStack Platform 17.1",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:18.0"
],
"defaultStatus": "affected",
"packageName": "rhoso-operators/sg-core-rhel9",
"product": "Red Hat OpenStack Platform 18.0",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:quay:3"
],
"defaultStatus": "affected",
"packageName": "quay/quay-rhel8",
"product": "Red Hat Quay 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:quay:3"
],
"defaultStatus": "unaffected",
"packageName": "quay/quay-rhel9",
"product": "Red Hat Quay 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite:6"
],
"defaultStatus": "affected",
"packageName": "satellite:el8/yggdrasil-worker-forwarder",
"product": "Red Hat Satellite 6",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_interconnect:1"
],
"defaultStatus": "affected",
"packageName": "qpid-proton",
"product": "Red Hat Service Interconnect 1",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_interconnect:1"
],
"defaultStatus": "unaffected",
"packageName": "skupper-cli",
"product": "Red Hat Service Interconnect 1",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_interconnect:2"
],
"defaultStatus": "affected",
"packageName": "qpid-proton",
"product": "Red Hat Service Interconnect 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_interconnect:2"
],
"defaultStatus": "unaffected",
"packageName": "skupper-cli",
"product": "Red Hat Service Interconnect 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_interconnect:2"
],
"defaultStatus": "affected",
"packageName": "skupper-router",
"product": "Red Hat Service Interconnect 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_security_profiles_operator:1"
],
"defaultStatus": "affected",
"packageName": "compliance/openshift-selinuxd-rhel8",
"product": "Security Profiles Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:stf:1.5"
],
"defaultStatus": "affected",
"packageName": "stf/sg-core-rhel9",
"product": "Service Telemetry Framework 1.5",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:zero_trust_workload_identity_manager:1"
],
"defaultStatus": "unaffected",
"packageName": "zero-trust-workload-identity-manager/spiffe-csi-driver-rhel9",
"product": "Zero Trust Workload Identity Manager",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:zero_trust_workload_identity_manager:0"
],
"defaultStatus": "affected",
"packageName": "zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9",
"product": "Zero Trust Workload Identity Manager - Tech Preview",
"vendor": "Red Hat"
}
],
"datePublic": "2026-05-07T19:41:19.285Z",
"descriptions": [
{
"lang": "en",
"value": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application."
}
],
"metrics": [
{
"other": {
"content": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"value": "Important"
},
"type": "Red Hat severity rating"
}
},
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-1341",
"description": "Multiple Releases of Same Resource or Handle",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-25T12:05:52.591Z",
"orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"shortName": "redhat-SADP"
},
"references": [
{
"tags": [
"vdb-entry",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"name": "RHBZ#2467822",
"tags": [
"issue-tracking",
"x_refsource_REDHAT"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"tags": [
"x_sadp-csaf-vex"
],
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33811.json"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42079"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54191"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42078"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:50319"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54757"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54552"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42082"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:50336"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36796"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:39810"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42150"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42151"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42240"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:49703"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:53413"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54168"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:51187"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:39272"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:35832"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:34357"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42946"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:39573"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:38504"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:39266"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36776"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:53412"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:53415"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:39319"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36617"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:34359"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54500"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:34364"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:56340"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:50843"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:47952"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42852"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:47149"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:53530"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:43692"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:51057"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:57191"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36625"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36207"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36319"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42132"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:33574"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36651"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:40118"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:23262"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:23264"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54441"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:50300"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:43038"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42644"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36648"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54556"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54584"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54603"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54602"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:35994"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:35995"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:35993"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:33120"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:33123"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:33142"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:33150"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54287"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54284"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54286"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54285"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54274"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54283"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:50205"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:51341"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:51194"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36797"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42043"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42047"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42050"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42051"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42049"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42048"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:41030"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:44622"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54435"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:46885"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:57194"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:41055"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:47735"
}
],
"solutions": [
{
"lang": "en",
"value": "RHSA-2026:42079: Red Hat Ansible Automation Platform 2.6 for RHEL 10, Red Hat Ansible Automation Platform 2.6 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:41019: RHEM 1.1 for RHEL 10, RHEM 1.1 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:54191: Red Hat Enterprise Linux Server (v. 7 ELS)"
},
{
"lang": "en",
"value": "RHSA-2026:42078: Red Hat Ansible Automation Platform 2.5 for RHEL 8, Red Hat Ansible Automation Platform 2.5 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:50319: Red Hat Ansible Automation Platform 2.5 for RHEL 8, Red Hat Ansible Automation Platform 2.5 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:54757: Red Hat OpenStack Platform 16.2"
},
{
"lang": "en",
"value": "RHSA-2026:54552: Red Hat OpenShift Container Platform 4.19"
},
{
"lang": "en",
"value": "RHSA-2026:42082: Red Hat Satellite 6.16 for RHEL 8, Red Hat Satellite 6.16 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:50336: Red Hat Ansible Automation Platform 2.6 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:48151: Cryostat 4 on RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:36796: RHEM 1.0 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:39810: 9Base-RHOSO-TOOLS-18, Red Hat OpenStack Services on OpenShift 18.0"
},
{
"lang": "en",
"value": "RHSA-2026:42150: Red Hat Satellite 6.17 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:42151: Red Hat Satellite 6.18 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:42240: Red Hat Satellite 6.19 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:49703: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:53413: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:54168: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:51187: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:39272: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:35832: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:34357: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:42946: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:39573: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:38504: Red Hat Enterprise Linux AppStream (v. 8)"
},
{
"lang": "en",
"value": "RHSA-2026:39266: Red Hat Enterprise Linux AppStream (v. 8)"
},
{
"lang": "en",
"value": "RHSA-2026:36776: Red Hat Enterprise Linux AppStream (v. 8)"
},
{
"lang": "en",
"value": "RHSA-2026:53412: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
},
{
"lang": "en",
"value": "RHSA-2026:53415: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:39319: Red Hat Enterprise Linux AppStream (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:36617: Red Hat Enterprise Linux AppStream (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:34359: Red Hat Enterprise Linux AppStream (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:54500: Compliance Operator 1"
},
{
"lang": "en",
"value": "RHSA-2026:34364: Logging Subsystem for Red Hat OpenShift 6.4"
},
{
"lang": "en",
"value": "RHSA-2026:56340: Logging Subsystem for Red Hat OpenShift 6.5"
},
{
"lang": "en",
"value": "RHSA-2026:50843: Logging for Red Hat OpenShift 6.0"
},
{
"lang": "en",
"value": "RHSA-2026:47952: Logging for Red Hat OpenShift 6.2"
},
{
"lang": "en",
"value": "RHSA-2026:42852: Multicluster Global Hub 1.5.6"
},
{
"lang": "en",
"value": "RHSA-2026:47149: Multicluster Global Hub 1.7.0"
},
{
"lang": "en",
"value": "RHSA-2026:53530: Multicluster Global Hub 1.7.0"
},
{
"lang": "en",
"value": "RHSA-2026:51033: OpenShift API for Data Protection 1.3"
},
{
"lang": "en",
"value": "RHSA-2026:43692: OpenShift API for Data Protection 1.6"
},
{
"lang": "en",
"value": "RHSA-2026:51057: OpenShift Developer Tools and Services 1.6.2"
},
{
"lang": "en",
"value": "RHSA-2026:57191: Red Hat Advanced Cluster Management for Kubernetes 2.16"
},
{
"lang": "en",
"value": "RHSA-2026:36625: Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"lang": "en",
"value": "RHSA-2026:36207: Red Hat Advanced Cluster Security for Kubernetes 4.11"
},
{
"lang": "en",
"value": "RHSA-2026:36319: Red Hat Advanced Cluster Security for Kubernetes 4.9"
},
{
"lang": "en",
"value": "RHSA-2026:42132: Red Hat Ansible Automation Platform 2.6"
},
{
"lang": "en",
"value": "RHSA-2026:33574: Red Hat Developer Hub 1.9"
},
{
"lang": "en",
"value": "RHSA-2026:36651: Red Hat Edge Manager 1.0"
},
{
"lang": "en",
"value": "RHSA-2026:40945: Red Hat Edge Manager 1.1"
},
{
"lang": "en",
"value": "RHSA-2026:40118: Red Hat Edge Manager 1.1"
},
{
"lang": "en",
"value": "RHSA-2026:23262: Red Hat Hardened Images"
},
{
"lang": "en",
"value": "RHSA-2026:23264: Red Hat Hardened Images"
},
{
"lang": "en",
"value": "RHSA-2026:54441: Red Hat Lightspeed (formerly Insights) for Runtimes 1.0"
},
{
"lang": "en",
"value": "RHSA-2026:41928: Red Hat Migration Toolkit 1.8"
},
{
"lang": "en",
"value": "RHSA-2026:50300: Red Hat Migration Toolkit for Applications 8.1"
},
{
"lang": "en",
"value": "RHSA-2026:43038: Red Hat Migration Toolkit for Applications 8.2"
},
{
"lang": "en",
"value": "RHSA-2026:42644: Red Hat OpenShift AI 2.25"
},
{
"lang": "en",
"value": "RHSA-2026:36648: Red Hat OpenShift Builds 1.7.3"
},
{
"lang": "en",
"value": "RHSA-2026:54556: Red Hat OpenShift Container Platform 4.19"
},
{
"lang": "en",
"value": "RHSA-2026:54584: Red Hat OpenShift Container Platform 4.20"
},
{
"lang": "en",
"value": "RHSA-2026:54603: Red Hat OpenShift Container Platform 4.21"
},
{
"lang": "en",
"value": "RHSA-2026:54602: Red Hat OpenShift Container Platform 4.21"
},
{
"lang": "en",
"value": "RHSA-2026:35994: Red Hat OpenShift GitOps 1.19"
},
{
"lang": "en",
"value": "RHSA-2026:35995: Red Hat OpenShift GitOps 1.21"
},
{
"lang": "en",
"value": "RHSA-2026:35993: Red Hat OpenShift GitOps 1.2"
},
{
"lang": "en",
"value": "RHSA-2026:33120: Red Hat OpenShift Service Mesh 3.0"
},
{
"lang": "en",
"value": "RHSA-2026:33123: Red Hat OpenShift Service Mesh 3.1"
},
{
"lang": "en",
"value": "RHSA-2026:33142: Red Hat OpenShift Service Mesh 3.2"
},
{
"lang": "en",
"value": "RHSA-2026:33150: Red Hat OpenShift Service Mesh 3.3"
},
{
"lang": "en",
"value": "RHSA-2026:54287: Red Hat OpenShift Workload Availability 0.12"
},
{
"lang": "en",
"value": "RHSA-2026:54284: Red Hat OpenShift Workload Availability 0.13"
},
{
"lang": "en",
"value": "RHSA-2026:54286: Red Hat OpenShift Workload Availability 0.3"
},
{
"lang": "en",
"value": "RHSA-2026:54285: Red Hat OpenShift Workload Availability 0.7"
},
{
"lang": "en",
"value": "RHSA-2026:54274: Red Hat OpenShift Workload Availability 0.8"
},
{
"lang": "en",
"value": "RHSA-2026:54283: Red Hat OpenShift Workload Availability 5.7"
},
{
"lang": "en",
"value": "RHSA-2026:50205: Red Hat OpenShift distributed tracing 3.10.1"
},
{
"lang": "en",
"value": "RHSA-2026:51341: Red Hat Satellite 6.18"
},
{
"lang": "en",
"value": "RHSA-2026:51194: Red Hat Satellite 6.19"
},
{
"lang": "en",
"value": "RHSA-2026:36797: Red Hat Trusted Artifact Signer 1.4"
},
{
"lang": "en",
"value": "RHSA-2026:42043: Red Hat Web Terminal 1.11"
},
{
"lang": "en",
"value": "RHSA-2026:42047: Red Hat Web Terminal 1.12"
},
{
"lang": "en",
"value": "RHSA-2026:42050: Red Hat Web Terminal 1.13"
},
{
"lang": "en",
"value": "RHSA-2026:42051: Red Hat Web Terminal 1.14"
},
{
"lang": "en",
"value": "RHSA-2026:42049: Red Hat Web Terminal 1.15"
},
{
"lang": "en",
"value": "RHSA-2026:42048: Red Hat Web Terminal 1.16"
},
{
"lang": "en",
"value": "RHSA-2026:41030: Red Hat multicluster global hub 1.4.2"
},
{
"lang": "en",
"value": "RHSA-2026:44622: Red Hat multicluster global hub 1.6.0"
},
{
"lang": "en",
"value": "RHSA-2026:54435: Streams for Apache Kafka 3.2.1"
},
{
"lang": "en",
"value": "RHSA-2026:46885: multicluster engine for Kubernetes 2.10"
},
{
"lang": "en",
"value": "RHSA-2026:57194: multicluster engine for Kubernetes 2.11.0"
},
{
"lang": "en",
"value": "RHSA-2026:41055: multicluster engine for Kubernetes 2.6"
},
{
"lang": "en",
"value": "RHSA-2026:47735: multicluster engine for Kubernetes 2.8"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-05-07T20:01:34.913Z",
"value": "Reported to Red Hat."
},
{
"lang": "en",
"time": "2026-05-07T19:41:19.285Z",
"value": "Made public."
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"workarounds": [
{
"lang": "en",
"value": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment."
}
],
"x_adpType": "supplier",
"x_generator": {
"engine": "sadp-cli 1.0.0"
}
}
],
"cna": {
"affected": [
{
"collectionURL": "https://pkg.go.dev",
"defaultStatus": "unaffected",
"packageName": "net",
"product": "net",
"programRoutines": [
{
"name": "cgoResSearch"
},
{
"name": "LookupCNAME"
},
{
"name": "Resolver.LookupCNAME"
}
],
"vendor": "Go standard library",
"versions": [
{
"lessThan": "1.25.10",
"status": "affected",
"version": "0",
"versionType": "semver"
},
{
"lessThan": "1.26.3",
"status": "affected",
"version": "1.26.0-0",
"versionType": "semver"
}
]
}
],
"credits": [
{
"lang": "en",
"value": "hamayanhamayan"
}
],
"descriptions": [
{
"lang": "en",
"value": "When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "CWE-415: Double Free",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-05-07T19:41:19.285Z",
"orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
"shortName": "Go"
},
"references": [
{
"url": "https://go.dev/issue/78803"
},
{
"url": "https://go.dev/cl/767860"
},
{
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"title": "Crash when handling long CNAME response in net"
}
},
"cveMetadata": {
"assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
"assignerShortName": "Go",
"cveId": "CVE-2026-33811",
"datePublished": "2026-05-07T19:41:19.285Z",
"dateReserved": "2026-03-23T20:35:32.814Z",
"dateUpdated": "2026-08-25T12:05:52.591Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2026-33811",
"date": "2026-08-25",
"epss": "0.00813",
"percentile": "0.5427"
},
"microsoft_vex": {
"current_release_date": "2026-06-09T01:42:02.000Z",
"cve": "CVE-2026-33811",
"id": "msrc_CVE-2026-33811",
"initial_release_date": "2026-05-02T00:00:00.000Z",
"product_status:known_affected": "2",
"product_status:known_not_affected": "4",
"source": "Microsoft CSAF VEX",
"status": "final",
"title": "Crash when handling long CNAME response in net",
"url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-33811.json",
"version": "6"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2026-33811\",\"sourceIdentifier\":\"security@golang.org\",\"published\":\"2026-05-07T20:16:42.770\",\"lastModified\":\"2026-08-25T13:18:32.360\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash.\"}],\"affected\":[{\"source\":\"security@golang.org\",\"affectedData\":[{\"vendor\":\"Go standard library\",\"product\":\"net\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://pkg.go.dev\",\"packageName\":\"net\",\"programRoutines\":[{\"name\":\"cgoResSearch\"},{\"name\":\"LookupCNAME\"},{\"name\":\"Resolver.LookupCNAME\"}],\"versions\":[{\"version\":\"0\",\"lessThan\":\"1.25.10\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"1.26.0-0\",\"lessThan\":\"1.26.3\",\"versionType\":\"semver\",\"status\":\"affected\"}]}]},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"affectedData\":[{\"vendor\":\"Red Hat\",\"product\":\"Cryostat 4 on RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"cryostat/cryostat-storage-rhel9\",\"cpes\":[\"cpe:/a:redhat:cryostat:4::el9\"],\"versions\":[{\"version\":\"4.2.0-19\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.5 for RHEL 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"receptor\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.5::el8\"],\"versions\":[{\"version\":\"0:1.6.6-1.el8ap\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.5 for RHEL 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"automation-gateway-proxy\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.5::el8\"],\"versions\":[{\"version\":\"0:2.5.10-7.el8ap\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.5 for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"receptor\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.5::el9\"],\"versions\":[{\"version\":\"0:1.6.6-1.el9ap\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.5 for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"automation-gateway-proxy\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.5::el9\"],\"versions\":[{\"version\":\"0:2.6.17-2.el9ap\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.6 for RHEL 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"receptor\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.6::el10\"],\"versions\":[{\"version\":\"0:1.6.6-1.el10ap\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.6 for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"receptor\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.6::el9\"],\"versions\":[{\"version\":\"0:1.6.6-1.el9ap\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.6 for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"automation-gateway-proxy\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.6::el9\"],\"versions\":[{\"version\":\"0:2.6.17-2.el9ap\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"opentelemetry-collector\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"0:0.152.1-1.el10_2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"golang-github-openprinting-ipp-usb\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"0:0.9.27-7.el10_2.2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"git-lfs\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"0:3.7.1-5.el10_2.6\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"yggdrasil\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"0:0.4.9.2-1.el10_2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhc-worker-playbook\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"0:0.2.10-1.el10_2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10.0 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"delve\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"],\"versions\":[{\"version\":\"0:1.26.1-1.el10_0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10.0 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"yggdrasil\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"],\"versions\":[{\"version\":\"0:0.4.7-5.el10_0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10.0 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"opentelemetry-collector\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"],\"versions\":[{\"version\":\"0:0.152.1-1.el10_0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10.0 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhc-worker-playbook\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"],\"versions\":[{\"version\":\"0:0.2.3-6.el10_0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 7 Extended Lifecycle Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhc-worker-script\",\"cpes\":[\"cpe:/o:redhat:rhel_els:7\"],\"versions\":[{\"version\":\"0:0.11-1.el7_9\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhc\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:8\"],\"versions\":[{\"version\":\"1:0.2.5-8.el8_10\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-tools:rhel8\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:8\"],\"versions\":[{\"version\":\"8100020260709093628.afee755d\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"git-lfs\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:8\"],\"versions\":[{\"version\":\"0:3.4.1-12.el8_10\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"opentelemetry-collector\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9\"],\"versions\":[{\"version\":\"0:0.152.1-1.el9_8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"oci-seccomp-bpf-hook\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9\"],\"versions\":[{\"version\":\"0:1.2.11-2.el9_8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"git-lfs\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9\"],\"versions\":[{\"version\":\"0:3.7.1-4.el9_8.2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"opentelemetry-collector\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.4\"],\"versions\":[{\"version\":\"0:0.152.1-1.el9_4\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.6 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"opentelemetry-collector\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.6\"],\"versions\":[{\"version\":\"0:0.152.1-1.el9_6\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"cri-tools\",\"cpes\":[\"cpe:/a:redhat:openshift:4.19::el8\"],\"versions\":[{\"version\":\"0:1.32.0-6.el9\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift\",\"cpes\":[\"cpe:/a:redhat:openshift:4.19::el8\"],\"versions\":[{\"version\":\"0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-clients\",\"cpes\":[\"cpe:/a:redhat:openshift:4.19::el8\"],\"versions\":[{\"version\":\"0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"ose-aws-ecr-image-credential-provider\",\"cpes\":[\"cpe:/a:redhat:openshift:4.19::el8\"],\"versions\":[{\"version\":\"0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 16.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"collectd-sensubility\",\"cpes\":[\"cpe:/a:redhat:openstack:16.2::el8\"],\"versions\":[{\"version\":\"0:0.2.1-1.1.el8ost\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 16.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"etcd\",\"cpes\":[\"cpe:/a:redhat:openstack:16.2::el8\"],\"versions\":[{\"version\":\"0:3.3.23-22.el8ost\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Services on OpenShift 18.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang-github-openstack-k8s-operators-os-diff\",\"cpes\":[\"cpe:/a:redhat:openstack:18.0::el9\"],\"versions\":[{\"version\":\"0:0.1.1-18.0.20260602234716.a95ae05.el9ost\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6.16 for RHEL 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"yggdrasil-worker-forwarder\",\"cpes\":[\"cpe:/a:redhat:satellite:6.16::el8\"],\"versions\":[{\"version\":\"0:0.0.4-1.el8sat\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6.16 for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"yggdrasil-worker-forwarder\",\"cpes\":[\"cpe:/a:redhat:satellite:6.16::el9\"],\"versions\":[{\"version\":\"0:0.0.4-1.el9sat\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6.17 for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"yggdrasil-worker-forwarder\",\"cpes\":[\"cpe:/a:redhat:satellite:6.17::el9\"],\"versions\":[{\"version\":\"0:0.0.4-1.el9sat\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6.18 for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"yggdrasil-worker-forwarder\",\"cpes\":[\"cpe:/a:redhat:satellite:6.18::el9\"],\"versions\":[{\"version\":\"0:0.0.4-1.el9sat\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6.19 for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"yggdrasil-worker-forwarder\",\"cpes\":[\"cpe:/a:redhat:satellite:6.19::el9\"],\"versions\":[{\"version\":\"0:0.0.4-1.el9sat\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"RHEM 1.0 for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"flightctl\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.0::el9\"],\"versions\":[{\"version\":\"0:1.0.3-1.el9em\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"RHEM 1.1 for RHEL 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"flightctl\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el10\"],\"versions\":[{\"version\":\"0:1.1.3-1.el10em\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"RHEM 1.1 for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"flightctl\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el9\"],\"versions\":[{\"version\":\"0:1.1.3-1.el9em\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Streams for Apache Kafka 3.2.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang-github\",\"cpes\":[\"cpe:/a:redhat:amq_streams:3.2::el9\"],\"versions\":[{\"version\":\"danielqsj-kafka_exporter\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Compliance Operator 1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"compliance/openshift-compliance-operator-bundle\",\"cpes\":[\"cpe:/a:redhat:openshift_compliance_operator:1::el9\"],\"versions\":[{\"version\":\"1786380082\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Logging for Red Hat OpenShift 6.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-logging/eventrouter-rhel9\",\"cpes\":[\"cpe:/a:redhat:logging:6.0::el9\"],\"versions\":[{\"version\":\"1785418851\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Logging for Red Hat OpenShift 6.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-logging/eventrouter-rhel9\",\"cpes\":[\"cpe:/a:redhat:logging:6.2::el9\"],\"versions\":[{\"version\":\"1784747813\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Logging Subsystem for Red Hat OpenShift 6.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-logging/eventrouter-rhel9\",\"cpes\":[\"cpe:/a:redhat:logging:6.4::el9\"],\"versions\":[{\"version\":\"1782408807\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Logging Subsystem for Red Hat OpenShift 6.5\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-logging/logging-loki-rhel9\",\"cpes\":[\"cpe:/a:redhat:logging:6.5::el9\"],\"versions\":[{\"version\":\"1786645248\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/discovery-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.10::el9\"],\"versions\":[{\"version\":\"1784915379\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.11.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/addon-manager-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.11::el9\"],\"versions\":[{\"version\":\"1786911941\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.11.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/backplane-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.11::el9\"],\"versions\":[{\"version\":\"1786911952\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.11.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/clusterlifecycle-state-metrics-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.11::el9\"],\"versions\":[{\"version\":\"1786911945\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.11.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/discovery-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.11::el9\"],\"versions\":[{\"version\":\"1786911975\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.11.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/hypershift-addon-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.11::el9\"],\"versions\":[{\"version\":\"1786912006\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.11.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/managedcluster-import-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.11::el9\"],\"versions\":[{\"version\":\"1786911973\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.11.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/multicloud-manager-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.11::el9\"],\"versions\":[{\"version\":\"1786911950\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.11.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/placement-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.11::el9\"],\"versions\":[{\"version\":\"1786911984\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.11.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/registration-operator-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.11::el9\"],\"versions\":[{\"version\":\"1786911984\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.11.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/work-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.11::el9\"],\"versions\":[{\"version\":\"1786907276\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/discovery-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.6::el9\"],\"versions\":[{\"version\":\"1783985999\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/discovery-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.8::el9\"],\"versions\":[{\"version\":\"1784306906\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Global Hub 1.5.6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-globalhub/multicluster-globalhub-agent-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_globalhub:1.5::el9\"],\"versions\":[{\"version\":\"1784127491\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Global Hub 1.7.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-globalhub/multicluster-globalhub-agent-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_globalhub:1.7::el9\"],\"versions\":[{\"version\":\"1784768332\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1785775948\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift API for Data Protection 1.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"oadp/oadp-velero-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_api_data_protection:1.3::el9\"],\"versions\":[{\"version\":\"1785180878\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift API for Data Protection 1.6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"oadp/oadp-velero-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_api_data_protection:1.6::el9\"],\"versions\":[{\"version\":\"1784058822\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Developer Tools and Services 1.6.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"source-to-image/source-to-image-rhel8\",\"cpes\":[\"cpe:/a:redhat:source_to_image:1.6::el8\"],\"versions\":[{\"version\":\"1784727697\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Developer Tools and Services 1.6.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"source-to-image/source-to-image-rhel9\",\"cpes\":[\"cpe:/a:redhat:source_to_image:1.6::el8\"],\"versions\":[{\"version\":\"1784728036\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.16\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/klusterlet-addon-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.16::el9\"],\"versions\":[{\"version\":\"1786908301\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security for Kubernetes 4.10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"advanced-cluster-security/rhacs-main-rhel8\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4.10::el8\"],\"versions\":[{\"version\":\"1783357140\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security for Kubernetes 4.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"advanced-cluster-security/rhacs-main-rhel9\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4.11::el9\"],\"versions\":[{\"version\":\"1783352589\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security for Kubernetes 4.9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"advanced-cluster-security/rhacs-main-rhel8\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4.9::el8\"],\"versions\":[{\"version\":\"1783357116\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"ansible-automation-platform-26/receptor-rhel9\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.6::el9\"],\"versions\":[{\"version\":\"1783962464\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Developer Hub 1.9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhdh/rhdh-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:rhdh:1.9::el9\"],\"versions\":[{\"version\":\"1782767215\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-ui-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.0::el9\"],\"versions\":[{\"version\":\"1783502438\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-ui-rhel10\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el10\"],\"versions\":[{\"version\":\"1784194574\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-ui-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el9\"],\"versions\":[{\"version\":\"1784127736\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Hardened Images\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang1-25-main\",\"cpes\":[\"cpe:/a:redhat:hummingbird:1\"],\"versions\":[{\"version\":\"1.25.11-2.hum1\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Hardened Images\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang1-26-main\",\"cpes\":[\"cpe:/a:redhat:hummingbird:1\"],\"versions\":[{\"version\":\"1.26.4-2.hum1\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:lightspeed_for_runtimes:1.0::el9\"],\"versions\":[{\"version\":\"1786483782\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Migration Toolkit 1.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhmtc/openshift-migration-registry-rhel8\",\"cpes\":[\"cpe:/a:redhat:rhmt:1.8::el8\"],\"versions\":[{\"version\":\"1783914276\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Migration Toolkit for Applications 8.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"mta/mta-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:migration_toolkit_applications:8.1::el9\"],\"versions\":[{\"version\":\"1785171639\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Migration Toolkit for Applications 8.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"mta/mta-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:migration_toolkit_applications:8.2::el9\"],\"versions\":[{\"version\":\"1784211378\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat multicluster global hub 1.4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-globalhub/multicluster-globalhub-agent-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_globalhub:1.4::el9\"],\"versions\":[{\"version\":\"1784061472\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat multicluster global hub 1.6.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-globalhub/multicluster-globalhub-agent-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_globalhub:1.6::el9\"],\"versions\":[{\"version\":\"1784152046\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI 2.25\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhoai/odh-kueue-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai:2.25::el9\"],\"versions\":[{\"version\":\"1783544461\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI 2.25\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhoai/odh-training-operator-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai:2.25::el9\"],\"versions\":[{\"version\":\"1783946386\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Builds 1.7.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-builds/openshift-builds-waiters-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_builds:1.7::el9\"],\"versions\":[{\"version\":\"1783057868\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-ansible-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift:4.19::el9\"],\"versions\":[{\"version\":\"1786490745\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.20\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-ansible-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift:4.20::el9\"],\"versions\":[{\"version\":\"1786525840\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.21\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-hypershift-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.21::el9\"],\"versions\":[{\"version\":\"1786573075\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.21\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-ansible-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift:4.21::el9\"],\"versions\":[{\"version\":\"1786526139\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift distributed tracing 3.10.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhosdt/opentelemetry-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_distributed_tracing:3.10::el9\"],\"versions\":[{\"version\":\"1785704547\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift GitOps 1.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-gitops-1/dex-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift_gitops:1.19::el8\"],\"versions\":[{\"version\":\"1782292352\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift GitOps 1.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-gitops-1/dex-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_gitops:1.20::el9\"],\"versions\":[{\"version\":\"1782383826\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift GitOps 1.21\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-gitops-1/dex-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_gitops:1.21::el9\"],\"versions\":[{\"version\":\"1782910941\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-cni-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.0::el9\"],\"versions\":[{\"version\":\"1782222217\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-pilot-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.0::el9\"],\"versions\":[{\"version\":\"1782223341\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-proxyv2-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.0::el9\"],\"versions\":[{\"version\":\"1782296193\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.0::el9\"],\"versions\":[{\"version\":\"1782222607\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-cni-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.1::el9\"],\"versions\":[{\"version\":\"1782222163\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-pilot-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.1::el9\"],\"versions\":[{\"version\":\"1782223138\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-proxyv2-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.1::el9\"],\"versions\":[{\"version\":\"1782222394\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.1::el9\"],\"versions\":[{\"version\":\"1782222451\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-cni-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.2::el9\"],\"versions\":[{\"version\":\"1782226178\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-pilot-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.2::el9\"],\"versions\":[{\"version\":\"1782224487\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-proxyv2-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.2::el9\"],\"versions\":[{\"version\":\"1782303211\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.2::el9\"],\"versions\":[{\"version\":\"1782224541\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-cni-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.3::el9\"],\"versions\":[{\"version\":\"1782223045\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-pilot-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.3::el9\"],\"versions\":[{\"version\":\"1782222366\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-proxyv2-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.3::el9\"],\"versions\":[{\"version\":\"1782310747\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.3::el9\"],\"versions\":[{\"version\":\"1782222038\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Workload Availability 0.12\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"workload-availability/node-healthcheck-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:workload_availability_nhc:0.12::el9\"],\"versions\":[{\"version\":\"1785202723\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Workload Availability 0.13\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"workload-availability/self-node-remediation-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:workload_availability_snr:0.13::el9\"],\"versions\":[{\"version\":\"1785203036\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Workload Availability 0.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"workload-availability/storage-based-remediation-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:workload_availability_sbr:0.3::el9\"],\"versions\":[{\"version\":\"1785203474\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Workload Availability 0.7\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"workload-availability/machine-deletion-remediation-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:workload_availability_mdr:0.7::el9\"],\"versions\":[{\"version\":\"1785203508\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Workload Availability 0.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"workload-availability/fence-agents-remediation-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:workload_availability_far:0.8::el9\"],\"versions\":[{\"version\":\"1785203079\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Workload Availability 5.7\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"workload-availability/node-maintenance-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:workload_availability_nmo:5.7::el9\"],\"versions\":[{\"version\":\"1785202847\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"satellite/iop-vmaas-rhel9\",\"cpes\":[\"cpe:/a:redhat:satellite:6.18::el9\"],\"versions\":[{\"version\":\"1785923308\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"satellite/iop-vmaas-rhel9\",\"cpes\":[\"cpe:/a:redhat:satellite:6.19::el9\"],\"versions\":[{\"version\":\"1785929994\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"conforma-cli-stack-v1\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.4::el9\"],\"versions\":[{\"version\":\"4-1.4.2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"4-1.4.3\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Web Terminal 1.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"web-terminal/web-terminal-exec-rhel9\",\"cpes\":[\"cpe:/a:redhat:webterminal:1.11::el9\"],\"versions\":[{\"version\":\"1784296203\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Web Terminal 1.12\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"web-terminal/web-terminal-exec-rhel9\",\"cpes\":[\"cpe:/a:redhat:webterminal:1.12::el9\"],\"versions\":[{\"version\":\"1784247610\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Web Terminal 1.13\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"web-terminal/web-terminal-exec-rhel9\",\"cpes\":[\"cpe:/a:redhat:webterminal:1.13::el9\"],\"versions\":[{\"version\":\"1784296127\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Web Terminal 1.14\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"web-terminal/web-terminal-exec-rhel9\",\"cpes\":[\"cpe:/a:redhat:webterminal:1.14::el9\"],\"versions\":[{\"version\":\"1784296114\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Web Terminal 1.15\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"web-terminal/web-terminal-exec-rhel9\",\"cpes\":[\"cpe:/a:redhat:webterminal:1.15::el9\"],\"versions\":[{\"version\":\"1784296033\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Web Terminal 1.16\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"web-terminal/web-terminal-exec-rhel9\",\"cpes\":[\"cpe:/a:redhat:webterminal:1.16::el9\"],\"versions\":[{\"version\":\"1784295767\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Assisted Installer for Red Hat OpenShift Container Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhai/assisted-installer-rhel9\",\"cpes\":[\"cpe:/a:redhat:assisted_installer:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"cert-manager Operator for Red Hat OpenShift\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"cert-manager/jetstack-cert-manager-rhel9\",\"cpes\":[\"cpe:/a:redhat:cert_manager:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Confidential Compute Attestation\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"build-of-trustee/trustee-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:confidential_compute_attestation:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Confidential Compute Attestation\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"confidential-compute-attestation-tech-preview/trustee-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:confidential_compute_attestation:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Confidential Compute Attestation\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-sandboxed-containers/osc-monitor-rhel9\",\"cpes\":[\"cpe:/a:redhat:confidential_compute_attestation:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Custom Metric Autoscaler operator for Red Hat Openshift\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_custom_metrics_autoscaler:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Deployment Validation Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"dvo/deployment-validation-rhel8-operator\",\"cpes\":[\"cpe:/a:redhat:deployment_validator_operator\"]},{\"vendor\":\"Red Hat\",\"product\":\"External Secrets Operator for Red Hat OpenShift\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"external-secrets-operator/external-secrets-rhel9\",\"cpes\":[\"cpe:/a:redhat:external_secrets_operator:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Fence Agents Remediation Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"redhat-user-workloads/far-operator-0-8\",\"cpes\":[\"cpe:/a:redhat:workload_availability_far:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"File Integrity Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"compliance/openshift-compliance-operator-bundle\",\"cpes\":[\"cpe:/a:redhat:openshift_file_integrity_operator:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Gatekeeper 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"gatekeeper/gatekeeper-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:gatekeeper:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Logical Volume Manager Storage\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"lvms4/lvms-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:lvms:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Logical Volume Manager Storage\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"lvms4/topolvm-rhel8\",\"cpes\":[\"cpe:/a:redhat:lvms:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Logical Volume Manager Storage\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"lvms4/topolvm-rhel9\",\"cpes\":[\"cpe:/a:redhat:lvms:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Machine Deletion Remediation Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"redhat-user-workloads/mdr-operator-0-7\",\"cpes\":[\"cpe:/a:redhat:workload_availability_mdr:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"mirror registry for Red Hat OpenShift\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift/mirror-registry-rhel8\",\"cpes\":[\"cpe:/a:redhat:mirror_registry:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"mirror registry for Red Hat OpenShift 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift/mirror-registry-rhel8\",\"cpes\":[\"cpe:/a:redhat:mirror_registry:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multiarch Tuning Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multiarch-tuning/multiarch-tuning-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:multiarch_tuning_operator\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Engine for Kubernetes\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multicluster-engine/maestro-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Global Hub\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multicluster-globalhub/multicluster-globalhub-agent-rhel8\",\"cpes\":[\"cpe:/a:redhat:multicluster_globalhub\"]},{\"vendor\":\"Red Hat\",\"product\":\"Network Observability Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"network-observability/network-observability-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:network_observ_optr:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Node HealthCheck Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"node-healthcheck-operator-tech-preview/node-healthcheck-rhel8-operator\",\"cpes\":[\"cpe:/a:redhat:workload_availability_nhc:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Node HealthCheck Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"redhat-user-workloads/nhc-operator-0-12\",\"cpes\":[\"cpe:/a:redhat:workload_availability_nhc:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Node HealthCheck Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"workload-availability/node-healthcheck-rhel8-operator\",\"cpes\":[\"cpe:/a:redhat:workload_availability_nhc:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Developer Tools and Services\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"helm\",\"cpes\":[\"cpe:/a:redhat:ocp_tools\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Lightspeed\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-lightspeed/lightspeed-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_lightspeed\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Pipelines\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-pipelines-client\",\"cpes\":[\"cpe:/a:redhat:openshift_pipelines:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Serverless\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"kn-workflow-plugin\",\"cpes\":[\"cpe:/a:redhat:serverless:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Serverless\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-serverless-1/kn-plugin-event-sender-rhel9\",\"cpes\":[\"cpe:/a:redhat:serverless:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Serverless\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-serverless-clients\",\"cpes\":[\"cpe:/a:redhat:serverless:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Service Mesh 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-golang-builder-container\",\"cpes\":[\"cpe:/a:redhat:service_mesh:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Service Mesh 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-service-mesh/kiali-rhel8\",\"cpes\":[\"cpe:/a:redhat:service_mesh:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Service Mesh 3\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-service-mesh/kiali-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Power monitoring for Red Hat OpenShift\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-power-monitoring/kepler-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_power_monitoring\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat 3scale API Management Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"3scale-amp2/3scale-rhel7-operator\",\"cpes\":[\"cpe:/a:redhat:red_hat_3scale_amp:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat 3scale API Management Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"3scale-amp2/3scale-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:red_hat_3scale_amp:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/acm-governance-policy-addon-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/acm-governance-policy-framework-addon-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/config-policy-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/governance-policy-propagator-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/subctl-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat AMQ Clients\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"python39-qpid-proton\",\"cpes\":[\"cpe:/a:redhat:amq_clients:2023\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat AMQ Clients\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"qpid-proton\",\"cpes\":[\"cpe:/a:redhat:amq_clients:2023\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ansible-automation-platform/platform-operator-bundle\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"automation-gateway-proxy-openssl30\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"automation-gateway-proxy-openssl32\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"python3.11-galaxy-ng\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"python3.11-grpcio\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"python3.12-galaxy-ng\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"python3.12-grpcio\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"python3x-grpcio\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"python-grpcio\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat build of Apicurio Registry 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"apicurio/apicurio-registry-rhel8-operator\",\"cpes\":[\"cpe:/a:redhat:service_registry:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat build of Apicurio Registry 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"apicurio/apicurio-registry-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:service_registry:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ceph Storage 5\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhceph/snmp-notifier-rhel8\",\"cpes\":[\"cpe:/a:redhat:ceph_storage:5\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ceph Storage 6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhceph/snmp-notifier-rhel9\",\"cpes\":[\"cpe:/a:redhat:ceph_storage:6\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ceph Storage 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhceph/alloy-rhel10\",\"cpes\":[\"cpe:/a:redhat:ceph_storage:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Certification Program for Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"redhat-certification-preflight\",\"cpes\":[\"cpe:/a:redhat:certifications:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Connectivity Link 1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhcl-1/rhcl-operator-bundle\",\"cpes\":[\"cpe:/a:redhat:connectivity_link:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"buildah\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"butane\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"conmon\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"delve\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"go-fdo-client\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"go-fdo-server\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"gpsd\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana-pcp\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"gvisor-tap-vsock\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"image-builder\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"oci-seccomp-bpf-hook\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"podman\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhc\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhel10/bootc-image-builder\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhel10-eus/rhel-10.0-bootc-image-builder\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"skopeo\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"toolbox\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"trustee\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"trustee-guest-components\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"yggdrasil-worker-package-manager\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 7\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"host-metering\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:7\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 7\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhc\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:7\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"go-toolset:rhel8/golang\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana-pcp\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"weldr-client\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"buildah\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"butane\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"conmon\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"containernetworking-plugins\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"gpsd-minimal\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana-pcp\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"gvisor-tap-vsock\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"image-builder\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhc\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhel9/bootc-image-builder\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhel9-eus/rhel-9.6-bootc-image-builder\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"runc\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"skopeo\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"toolbox\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"trustee-guest-components\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"weldr-client\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AI (RHEL AI) 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux_ai:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-ai-gateway-payload-processing-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-codeflare-operator-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-data-science-pipelines-argo-argoexec-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-data-science-pipelines-operator-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-feast-operator-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-kf-notebook-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-kserve-llmisvc-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-kube-auth-proxy-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-kuberay-operator-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-llama-stack-k8s-operator-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-llm-d-batch-gateway-apiserver-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-llm-d-batch-gateway-gc-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-llm-d-batch-gateway-processor-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-llm-d-inference-scheduler-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-llm-d-routing-sidecar-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-maas-api-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mlflow-operator-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-ml-pipelines-api-server-v2-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-ml-pipelines-driver-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-ml-pipelines-launcher-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mm-rest-proxy-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mod-arch-automl-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mod-arch-autorag-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mod-arch-eval-hub-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mod-arch-gen-ai-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mod-arch-maas-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mod-arch-mlflow-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mod-arch-model-registry-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-model-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-modelmesh-runtime-adapter-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-modelmesh-serving-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-model-registry-operator-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-model-registry-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-model-serving-api-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-notebook-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-rhaii-cluster-validator-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-rhel8-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-trainer-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-trustyai-service-operator-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-workload-variant-autoscaler-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/rhai-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Cluster Manager CLI\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ocm-cli-clients/ocm-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_cluster_manager_cli:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"butane\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"conmon\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"conmon-rs\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"containernetworking-plugins\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang-github-prometheus-promu\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"kata-containers\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/frr-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-ansible-operator\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-node\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-sdn-rhel7\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-sdn-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-sdn-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-golang-builder-container\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ose-azure-acr-image-credential-provider\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ose-gcp-gcr-image-credential-provider\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"runc\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"skopeo\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ocs4/cephcsi-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"odf4/cephcsi-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"odf4/cephcsi-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Dev Spaces\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"devspaces/udi-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_devspaces:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Dev Workspaces Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"devworkspace/devworkspace-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:devworkspace\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift for Windows Containers\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4-wincw/windows-machine-config-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:windows_machine_config\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift on AWS\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rosa\",\"cpes\":[\"cpe:/a:redhat:openshift_service_on_aws:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Virtualization 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-native-virtualization/kubevirt-apiserver-proxy-rhel9\",\"cpes\":[\"cpe:/a:redhat:container_native_virtualization:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Virtualization 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-native-virtualization/virt-api-rhel9\",\"cpes\":[\"cpe:/a:redhat:container_native_virtualization:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Virtualization 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"kubevirt\",\"cpes\":[\"cpe:/a:redhat:container_native_virtualization:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Virtualization 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-golang-builder-container\",\"cpes\":[\"cpe:/a:redhat:container_native_virtualization:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 16.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang-github-infrawatch-apputils\",\"cpes\":[\"cpe:/a:redhat:openstack:16.2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 16.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang-qpid-apache\",\"cpes\":[\"cpe:/a:redhat:openstack:16.2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 16.2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"qpid-proton\",\"cpes\":[\"cpe:/a:redhat:openstack:16.2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 16.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhosp-rhel8/osp-director-agent\",\"cpes\":[\"cpe:/a:redhat:openstack:16.2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 17.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"collectd-libpod-stats\",\"cpes\":[\"cpe:/a:redhat:openstack:17.1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 17.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"etcd\",\"cpes\":[\"cpe:/a:redhat:openstack:17.1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 17.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang-github-infrawatch-apputils\",\"cpes\":[\"cpe:/a:redhat:openstack:17.1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 17.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang-qpid-apache\",\"cpes\":[\"cpe:/a:redhat:openstack:17.1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 17.1\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"qpid-proton\",\"cpes\":[\"cpe:/a:redhat:openstack:17.1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 17.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhosp-rhel9/osp-director-agent\",\"cpes\":[\"cpe:/a:redhat:openstack:17.1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 18.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoso-operators/sg-core-rhel9\",\"cpes\":[\"cpe:/a:redhat:openstack:18.0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"quay/quay-rhel8\",\"cpes\":[\"cpe:/a:redhat:quay:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"quay/quay-rhel9\",\"cpes\":[\"cpe:/a:redhat:quay:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"satellite:el8/yggdrasil-worker-forwarder\",\"cpes\":[\"cpe:/a:redhat:satellite:6\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Service Interconnect 1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"qpid-proton\",\"cpes\":[\"cpe:/a:redhat:service_interconnect:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Service Interconnect 1\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"skupper-cli\",\"cpes\":[\"cpe:/a:redhat:service_interconnect:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Service Interconnect 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"qpid-proton\",\"cpes\":[\"cpe:/a:redhat:service_interconnect:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Service Interconnect 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"skupper-cli\",\"cpes\":[\"cpe:/a:redhat:service_interconnect:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Service Interconnect 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"skupper-router\",\"cpes\":[\"cpe:/a:redhat:service_interconnect:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Security Profiles Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"compliance/openshift-selinuxd-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift_security_profiles_operator:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Service Telemetry Framework 1.5\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"stf/sg-core-rhel9\",\"cpes\":[\"cpe:/a:redhat:stf:1.5\"]},{\"vendor\":\"Red Hat\",\"product\":\"Zero Trust Workload Identity Manager\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"zero-trust-workload-identity-manager/spiffe-csi-driver-rhel9\",\"cpes\":[\"cpe:/a:redhat:zero_trust_workload_identity_manager:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Zero Trust Workload Identity Manager - Tech Preview\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9\",\"cpes\":[\"cpe:/a:redhat:zero_trust_workload_identity_manager:0\"]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-05-08T14:25:39.702568Z\",\"id\":\"CVE-2026-33811\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"yes\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-415\"}]},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-1341\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.25.10\",\"matchCriteriaId\":\"1C966EF3-C51C-4239-B5FC-C44A5202FEC8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"1.26.0\",\"versionEndExcluding\":\"1.26.3\",\"matchCriteriaId\":\"522E4CD0-2B99-4363-9C78-0BAFD988A2D6\"}]}]}],\"references\":[{\"url\":\"https://go.dev/cl/767860\",\"source\":\"security@golang.org\",\"tags\":[\"Patch\"]},{\"url\":\"https://go.dev/issue/78803\",\"source\":\"security@golang.org\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://groups.google.com/g/golang-announce/c/qcCIEXso47M\",\"source\":\"security@golang.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://pkg.go.dev/vuln/GO-2026-4981\",\"source\":\"security@golang.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:23262\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:23264\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:33120\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:33123\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:33142\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:33150\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:33574\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:34357\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:34359\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:34364\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:35832\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:35993\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:35994\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:35995\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36207\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36319\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36617\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36625\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36648\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36651\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36776\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36796\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36797\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:38504\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:39266\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:39272\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:39319\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:39573\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:39810\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:40118\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:40945\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:41019\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:41030\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:41055\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:41928\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42043\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42047\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42048\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42049\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42050\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42051\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42078\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42079\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42082\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42132\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42150\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42151\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42240\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42644\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42852\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42946\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:43038\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:43692\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:44622\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:46885\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:47149\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:47735\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:47952\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:48151\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:49703\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:50205\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:50300\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:50319\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:50336\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:50843\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:51033\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:51057\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:51187\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:51194\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:51341\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:53412\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:53413\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:53415\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:53530\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54168\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54191\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54274\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54283\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54284\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54285\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54286\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54287\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54435\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54441\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54500\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54552\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54556\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54584\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54602\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54603\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54757\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:56340\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:57191\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:57194\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/security/cve/CVE-2026-33811\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=2467822\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33811.json\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"}]}}",
"redhat_vex": {
"aggregate_severity": "Important",
"current_release_date": "2026-08-26T04:21:26+00:00",
"cve": "CVE-2026-33811",
"id": "CVE-2026-33811",
"initial_release_date": "2026-05-07T19:41:19.285000+00:00",
"product_status:fixed": "1057",
"product_status:known_affected": "167",
"product_status:known_not_affected": "4241",
"product_status:under_investigation": "5",
"source": "Red Hat CSAF VEX",
"status": "final",
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33811.json",
"version": "3"
},
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME\", \"metrics\": [{\"other\": {\"type\": \"Red Hat severity rating\", \"content\": {\"value\": \"Important\", \"namespace\": \"https://access.redhat.com/security/updates/classification/\"}}}, {\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.5, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"NONE\"}}], \"affected\": [{\"cpes\": [\"cpe:/a:redhat:cryostat:4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Cryostat 4 on RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"4.2.0-19\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"cryostat/cryostat-storage-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.5::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.5 for RHEL 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.6.6-1.el8ap\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"receptor\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.5::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.5 for RHEL 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:2.5.10-7.el8ap\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"automation-gateway-proxy\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.5 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.6.6-1.el9ap\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"receptor\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.5 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:2.6.17-2.el9ap\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"automation-gateway-proxy\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.6::el10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.6 for RHEL 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.6.6-1.el10ap\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"receptor\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.6::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.6 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.6.6-1.el9ap\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"receptor\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.6::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.6 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:2.6.17-2.el9ap\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"automation-gateway-proxy\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.152.1-1.el10_2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"opentelemetry-collector\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.9.27-7.el10_2.2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"golang-github-openprinting-ipp-usb\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.7.1-5.el10_2.6\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"git-lfs\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.4.9.2-1.el10_2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"yggdrasil\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.2.10-1.el10_2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhc-worker-playbook\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux_eus:10.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10.0 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.26.1-1.el10_0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"delve\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux_eus:10.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10.0 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.4.7-5.el10_0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"yggdrasil\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux_eus:10.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10.0 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.152.1-1.el10_0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"opentelemetry-collector\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux_eus:10.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10.0 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.2.3-6.el10_0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhc-worker-playbook\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_els:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 7 Extended Lifecycle Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.11-1.el7_9\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhc-worker-script\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1:0.2.5-8.el8_10\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"8100020260709093628.afee755d\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"container-tools:rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.4.1-12.el8_10\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"git-lfs\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.152.1-1.el9_8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"opentelemetry-collector\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.2.11-2.el9_8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"oci-seccomp-bpf-hook\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.7.1-4.el9_8.2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"git-lfs\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.152.1-1.el9_4\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"opentelemetry-collector\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.6 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.152.1-1.el9_6\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"opentelemetry-collector\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.19::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.32.0-6.el9\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"cri-tools\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.19::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.19::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-clients\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.19::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"ose-aws-ecr-image-credential-provider\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:16.2::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 16.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.2.1-1.1.el8ost\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"collectd-sensubility\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:16.2::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 16.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.3.23-22.el8ost\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"etcd\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:18.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Services on OpenShift 18.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.1.1-18.0.20260602234716.a95ae05.el9ost\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"golang-github-openstack-k8s-operators-os-diff\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6.16::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6.16 for RHEL 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.0.4-1.el8sat\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"yggdrasil-worker-forwarder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6.16::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6.16 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.0.4-1.el9sat\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"yggdrasil-worker-forwarder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6.17 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.0.4-1.el9sat\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"yggdrasil-worker-forwarder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6.18 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.0.4-1.el9sat\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"yggdrasil-worker-forwarder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6.19 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.0.4-1.el9sat\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"yggdrasil-worker-forwarder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"RHEM 1.0 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.0.3-1.el9em\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"flightctl\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el10\"], \"vendor\": \"Red Hat\", \"product\": \"RHEM 1.1 for RHEL 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.1.3-1.el10em\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"flightctl\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"RHEM 1.1 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.1.3-1.el9em\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"flightctl\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:amq_streams:3.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Streams for Apache Kafka 3.2.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"danielqsj-kafka_exporter\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"golang-github\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_compliance_operator:1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Compliance Operator 1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786380082\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"compliance/openshift-compliance-operator-bundle\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:logging:6.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Logging for Red Hat OpenShift 6.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1785418851\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-logging/eventrouter-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:logging:6.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Logging for Red Hat OpenShift 6.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784747813\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-logging/eventrouter-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:logging:6.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Logging Subsystem for Red Hat OpenShift 6.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782408807\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-logging/eventrouter-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:logging:6.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Logging Subsystem for Red Hat OpenShift 6.5\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786645248\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-logging/logging-loki-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.10::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784915379\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/discovery-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.11.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786911941\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/addon-manager-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.11.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786911952\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/backplane-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.11.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786911945\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/clusterlifecycle-state-metrics-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.11.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786911975\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/discovery-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.11.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786912006\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/hypershift-addon-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.11.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786911973\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/managedcluster-import-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.11.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786911950\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/multicloud-manager-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.11.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786911984\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/placement-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.11.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786911984\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/registration-operator-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.11.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786907276\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/work-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.6::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.6\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783985999\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/discovery-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784306906\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/discovery-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_globalhub:1.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Global Hub 1.5.6\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784127491\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-globalhub/multicluster-globalhub-agent-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_globalhub:1.7::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Global Hub 1.7.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784768332\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1785775948\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-globalhub/multicluster-globalhub-agent-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_api_data_protection:1.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift API for Data Protection 1.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1785180878\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"oadp/oadp-velero-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_api_data_protection:1.6::el9\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift API for Data Protection 1.6\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784058822\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"oadp/oadp-velero-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:source_to_image:1.6::el8\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Developer Tools and Services 1.6.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784727697\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"source-to-image/source-to-image-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:source_to_image:1.6::el8\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Developer Tools and Services 1.6.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784728036\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"source-to-image/source-to-image-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.16::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.16\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786908301\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/klusterlet-addon-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:advanced_cluster_security:4.10::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Security for Kubernetes 4.10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783357140\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"advanced-cluster-security/rhacs-main-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:advanced_cluster_security:4.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Security for Kubernetes 4.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783352589\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"advanced-cluster-security/rhacs-main-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:advanced_cluster_security:4.9::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Security for Kubernetes 4.9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783357116\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"advanced-cluster-security/rhacs-main-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.6::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.6\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783962464\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"ansible-automation-platform-26/receptor-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhdh:1.9::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Developer Hub 1.9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782767215\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhdh/rhdh-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783502438\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-ui-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784194574\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-ui-rhel10\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784127736\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-ui-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:hummingbird:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Hardened Images\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1.25.11-2.hum1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"golang1-25-main\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:hummingbird:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Hardened Images\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1.26.4-2.hum1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"golang1-26-main\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:lightspeed_for_runtimes:1.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786483782\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhmt:1.8::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Migration Toolkit 1.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783914276\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhmtc/openshift-migration-registry-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:migration_toolkit_applications:8.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Migration Toolkit for Applications 8.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1785171639\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"mta/mta-cli-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:migration_toolkit_applications:8.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Migration Toolkit for Applications 8.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784211378\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"mta/mta-cli-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_globalhub:1.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat multicluster global hub 1.4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784061472\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-globalhub/multicluster-globalhub-agent-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_globalhub:1.6::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat multicluster global hub 1.6.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784152046\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-globalhub/multicluster-globalhub-agent-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai:2.25::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI 2.25\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783544461\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhoai/odh-kueue-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai:2.25::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI 2.25\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783946386\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhoai/odh-training-operator-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_builds:1.7::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Builds 1.7.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783057868\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-builds/openshift-builds-waiters-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786490745\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-ansible-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.20\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786525840\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-ansible-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.21::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.21\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786573075\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-hypershift-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.21::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.21\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786526139\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-ansible-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_distributed_tracing:3.10::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift distributed tracing 3.10.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1785704547\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhosdt/opentelemetry-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_gitops:1.19::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift GitOps 1.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782292352\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-gitops-1/dex-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_gitops:1.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift GitOps 1.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782383826\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-gitops-1/dex-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_gitops:1.21::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift GitOps 1.21\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782910941\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-gitops-1/dex-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782222217\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-cni-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782223341\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-pilot-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782296193\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-proxyv2-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782222607\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782222163\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-cni-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782223138\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-pilot-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782222394\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-proxyv2-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782222451\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782226178\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-cni-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782224487\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-pilot-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782303211\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-proxyv2-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782224541\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782223045\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-cni-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782222366\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-pilot-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782310747\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-proxyv2-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782222038\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_nhc:0.12::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Workload Availability 0.12\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1785202723\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"workload-availability/node-healthcheck-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_snr:0.13::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Workload Availability 0.13\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1785203036\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"workload-availability/self-node-remediation-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_sbr:0.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Workload Availability 0.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1785203474\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"workload-availability/storage-based-remediation-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_mdr:0.7::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Workload Availability 0.7\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1785203508\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"workload-availability/machine-deletion-remediation-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_far:0.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Workload Availability 0.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1785203079\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"workload-availability/fence-agents-remediation-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_nmo:5.7::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Workload Availability 5.7\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1785202847\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"workload-availability/node-maintenance-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1785923308\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"satellite/iop-vmaas-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1785929994\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"satellite/iop-vmaas-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"4-1.4.2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"4-1.4.3\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"conforma-cli-stack-v1\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:webterminal:1.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Web Terminal 1.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784296203\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"web-terminal/web-terminal-exec-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:webterminal:1.12::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Web Terminal 1.12\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784247610\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"web-terminal/web-terminal-exec-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:webterminal:1.13::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Web Terminal 1.13\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784296127\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"web-terminal/web-terminal-exec-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:webterminal:1.14::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Web Terminal 1.14\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784296114\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"web-terminal/web-terminal-exec-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:webterminal:1.15::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Web Terminal 1.15\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784296033\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"web-terminal/web-terminal-exec-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:webterminal:1.16::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Web Terminal 1.16\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784295767\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"web-terminal/web-terminal-exec-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:assisted_installer:2\"], \"vendor\": \"Red Hat\", \"product\": \"Assisted Installer for Red Hat OpenShift Container Platform 2\", \"packageName\": \"rhai/assisted-installer-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cert_manager:1\"], \"vendor\": \"Red Hat\", \"product\": \"cert-manager Operator for Red Hat OpenShift\", \"packageName\": \"cert-manager/jetstack-cert-manager-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:confidential_compute_attestation:1\"], \"vendor\": \"Red Hat\", \"product\": \"Confidential Compute Attestation\", \"packageName\": \"build-of-trustee/trustee-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:confidential_compute_attestation:1\"], \"vendor\": \"Red Hat\", \"product\": \"Confidential Compute Attestation\", \"packageName\": \"confidential-compute-attestation-tech-preview/trustee-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:confidential_compute_attestation:1\"], \"vendor\": \"Red Hat\", \"product\": \"Confidential Compute Attestation\", \"packageName\": \"openshift-sandboxed-containers/osc-monitor-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_custom_metrics_autoscaler:2\"], \"vendor\": \"Red Hat\", \"product\": \"Custom Metric Autoscaler operator for Red Hat Openshift\", \"packageName\": \"custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:deployment_validator_operator\"], \"vendor\": \"Red Hat\", \"product\": \"Deployment Validation Operator\", \"packageName\": \"dvo/deployment-validation-rhel8-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:external_secrets_operator:1\"], \"vendor\": \"Red Hat\", \"product\": \"External Secrets Operator for Red Hat OpenShift\", \"packageName\": \"external-secrets-operator/external-secrets-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_far:0\"], \"vendor\": \"Red Hat\", \"product\": \"Fence Agents Remediation Operator\", \"packageName\": \"redhat-user-workloads/far-operator-0-8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_file_integrity_operator:1\"], \"vendor\": \"Red Hat\", \"product\": \"File Integrity Operator\", \"packageName\": \"compliance/openshift-compliance-operator-bundle\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:gatekeeper:3\"], \"vendor\": \"Red Hat\", \"product\": \"Gatekeeper 3\", \"packageName\": \"gatekeeper/gatekeeper-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:lvms:4\"], \"vendor\": \"Red Hat\", \"product\": \"Logical Volume Manager Storage\", \"packageName\": \"lvms4/lvms-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:lvms:4\"], \"vendor\": \"Red Hat\", \"product\": \"Logical Volume Manager Storage\", \"packageName\": \"lvms4/topolvm-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:lvms:4\"], \"vendor\": \"Red Hat\", \"product\": \"Logical Volume Manager Storage\", \"packageName\": \"lvms4/topolvm-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_mdr:0\"], \"vendor\": \"Red Hat\", \"product\": \"Machine Deletion Remediation Operator\", \"packageName\": \"redhat-user-workloads/mdr-operator-0-7\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:mirror_registry:1\"], \"vendor\": \"Red Hat\", \"product\": \"mirror registry for Red Hat OpenShift\", \"packageName\": \"openshift/mirror-registry-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:mirror_registry:2\"], \"vendor\": \"Red Hat\", \"product\": \"mirror registry for Red Hat OpenShift 2\", \"packageName\": \"openshift/mirror-registry-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:multiarch_tuning_operator\"], \"vendor\": \"Red Hat\", \"product\": \"Multiarch Tuning Operator\", \"packageName\": \"multiarch-tuning/multiarch-tuning-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Engine for Kubernetes\", \"packageName\": \"multicluster-engine/maestro-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_globalhub\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Global Hub\", \"packageName\": \"multicluster-globalhub/multicluster-globalhub-agent-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:network_observ_optr:1\"], \"vendor\": \"Red Hat\", \"product\": \"Network Observability Operator\", \"packageName\": \"network-observability/network-observability-cli-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_nhc:0\"], \"vendor\": \"Red Hat\", \"product\": \"Node HealthCheck Operator\", \"packageName\": \"node-healthcheck-operator-tech-preview/node-healthcheck-rhel8-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_nhc:0\"], \"vendor\": \"Red Hat\", \"product\": \"Node HealthCheck Operator\", \"packageName\": \"redhat-user-workloads/nhc-operator-0-12\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_nhc:0\"], \"vendor\": \"Red Hat\", \"product\": \"Node HealthCheck Operator\", \"packageName\": \"workload-availability/node-healthcheck-rhel8-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ocp_tools\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Developer Tools and Services\", \"packageName\": \"helm\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_lightspeed\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Lightspeed\", \"packageName\": \"openshift-lightspeed/lightspeed-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_pipelines:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Pipelines\", \"packageName\": \"openshift-pipelines-client\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:serverless:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Serverless\", \"packageName\": \"kn-workflow-plugin\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:serverless:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Serverless\", \"packageName\": \"openshift-serverless-1/kn-plugin-event-sender-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:serverless:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Serverless\", \"packageName\": \"openshift-serverless-clients\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:2\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Service Mesh 2\", \"packageName\": \"openshift-golang-builder-container\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:2\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Service Mesh 2\", \"packageName\": \"openshift-service-mesh/kiali-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Service Mesh 3\", \"packageName\": \"openshift-service-mesh/kiali-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_power_monitoring\"], \"vendor\": \"Red Hat\", \"product\": \"Power monitoring for Red Hat OpenShift\", \"packageName\": \"openshift-power-monitoring/kepler-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:red_hat_3scale_amp:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat 3scale API Management Platform 2\", \"packageName\": \"3scale-amp2/3scale-rhel7-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:red_hat_3scale_amp:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat 3scale API Management Platform 2\", \"packageName\": \"3scale-amp2/3scale-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/acm-governance-policy-addon-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/acm-governance-policy-framework-addon-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/config-policy-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/governance-policy-propagator-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/subctl-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:amq_clients:2023\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat AMQ Clients\", \"packageName\": \"python39-qpid-proton\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:amq_clients:2023\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat AMQ Clients\", \"packageName\": \"qpid-proton\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"ansible-automation-platform/platform-operator-bundle\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"automation-gateway-proxy-openssl30\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"automation-gateway-proxy-openssl32\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"python3.11-galaxy-ng\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"python3.11-grpcio\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"python3.12-galaxy-ng\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"python3.12-grpcio\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"python3x-grpcio\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"python-grpcio\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:service_registry:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat build of Apicurio Registry 2\", \"packageName\": \"apicurio/apicurio-registry-rhel8-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_registry:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat build of Apicurio Registry 2\", \"packageName\": \"apicurio/apicurio-registry-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ceph_storage:5\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ceph Storage 5\", \"packageName\": \"rhceph/snmp-notifier-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ceph_storage:6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ceph Storage 6\", \"packageName\": \"rhceph/snmp-notifier-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ceph_storage:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ceph Storage 9\", \"packageName\": \"rhceph/alloy-rhel10\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:certifications:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Certification Program for Red Hat Enterprise Linux 9\", \"packageName\": \"redhat-certification-preflight\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:connectivity_link:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Connectivity Link 1\", \"packageName\": \"rhcl-1/rhcl-operator-bundle\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"buildah\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"butane\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"conmon\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"delve\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"go-fdo-client\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"go-fdo-server\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"golang\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"gpsd\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"grafana\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"grafana-pcp\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"gvisor-tap-vsock\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"image-builder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"oci-seccomp-bpf-hook\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"podman\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"rhc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"rhel10/bootc-image-builder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"rhel10-eus/rhel-10.0-bootc-image-builder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"skopeo\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"toolbox\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"trustee\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"trustee-guest-components\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"yggdrasil-worker-package-manager\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 7\", \"packageName\": \"host-metering\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 7\", \"packageName\": \"rhc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"go-toolset:rhel8/golang\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"grafana\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"grafana-pcp\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"weldr-client\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"buildah\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"butane\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"conmon\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"containernetworking-plugins\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"golang\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"gpsd-minimal\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"grafana\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"grafana-pcp\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"gvisor-tap-vsock\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"image-builder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"rhc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"rhel9/bootc-image-builder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"rhel9-eus/rhel-9.6-bootc-image-builder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"runc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"skopeo\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"toolbox\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"trustee-guest-components\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"weldr-client\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux_ai:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AI (RHEL AI) 3\", \"packageName\": \"golang\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-ai-gateway-payload-processing-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-codeflare-operator-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-data-science-pipelines-argo-argoexec-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-data-science-pipelines-operator-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-feast-operator-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-kf-notebook-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-kserve-llmisvc-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-kube-auth-proxy-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-kuberay-operator-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-llama-stack-k8s-operator-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-llm-d-batch-gateway-apiserver-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-llm-d-batch-gateway-gc-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-llm-d-batch-gateway-processor-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-llm-d-inference-scheduler-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-llm-d-routing-sidecar-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-maas-api-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mlflow-operator-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-ml-pipelines-api-server-v2-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-ml-pipelines-driver-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-ml-pipelines-launcher-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mm-rest-proxy-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mod-arch-automl-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mod-arch-autorag-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mod-arch-eval-hub-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mod-arch-gen-ai-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mod-arch-maas-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mod-arch-mlflow-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mod-arch-model-registry-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-model-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-modelmesh-runtime-adapter-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-modelmesh-serving-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-model-registry-operator-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-model-registry-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-model-serving-api-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-notebook-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-rhaii-cluster-validator-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-rhel8-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-trainer-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-trustyai-service-operator-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-workload-variant-autoscaler-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/rhai-cli-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_cluster_manager_cli:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Cluster Manager CLI\", \"packageName\": \"ocm-cli-clients/ocm-cli-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"butane\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"conmon\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"conmon-rs\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"containernetworking-plugins\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"golang-github-prometheus-promu\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"kata-containers\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/frr-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-ansible-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-node\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-sdn-rhel7\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-sdn-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-sdn-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift-golang-builder-container\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"ose-azure-acr-image-credential-provider\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"ose-gcp-gcr-image-credential-provider\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"runc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"skopeo\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4\", \"packageName\": \"ocs4/cephcsi-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4\", \"packageName\": \"odf4/cephcsi-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4\", \"packageName\": \"odf4/cephcsi-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_devspaces:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Dev Spaces\", \"packageName\": \"devspaces/udi-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:devworkspace\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Dev Workspaces Operator\", \"packageName\": \"devworkspace/devworkspace-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:windows_machine_config\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift for Windows Containers\", \"packageName\": \"openshift4-wincw/windows-machine-config-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_service_on_aws:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift on AWS\", \"packageName\": \"rosa\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:container_native_virtualization:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Virtualization 4\", \"packageName\": \"container-native-virtualization/kubevirt-apiserver-proxy-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:container_native_virtualization:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Virtualization 4\", \"packageName\": \"container-native-virtualization/virt-api-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:container_native_virtualization:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Virtualization 4\", \"packageName\": \"kubevirt\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:container_native_virtualization:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Virtualization 4\", \"packageName\": \"openshift-golang-builder-container\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:16.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 16.2\", \"packageName\": \"golang-github-infrawatch-apputils\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:16.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 16.2\", \"packageName\": \"golang-qpid-apache\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:16.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 16.2\", \"packageName\": \"qpid-proton\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:16.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 16.2\", \"packageName\": \"rhosp-rhel8/osp-director-agent\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:17.1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 17.1\", \"packageName\": \"collectd-libpod-stats\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:17.1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 17.1\", \"packageName\": \"etcd\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:17.1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 17.1\", \"packageName\": \"golang-github-infrawatch-apputils\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:17.1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 17.1\", \"packageName\": \"golang-qpid-apache\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:17.1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 17.1\", \"packageName\": \"qpid-proton\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:17.1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 17.1\", \"packageName\": \"rhosp-rhel9/osp-director-agent\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:18.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 18.0\", \"packageName\": \"rhoso-operators/sg-core-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3\", \"packageName\": \"quay/quay-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3\", \"packageName\": \"quay/quay-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6\", \"packageName\": \"satellite:el8/yggdrasil-worker-forwarder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_interconnect:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Service Interconnect 1\", \"packageName\": \"qpid-proton\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_interconnect:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Service Interconnect 1\", \"packageName\": \"skupper-cli\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:service_interconnect:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Service Interconnect 2\", \"packageName\": \"qpid-proton\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_interconnect:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Service Interconnect 2\", \"packageName\": \"skupper-cli\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:service_interconnect:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Service Interconnect 2\", \"packageName\": \"skupper-router\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_security_profiles_operator:1\"], \"vendor\": \"Red Hat\", \"product\": \"Security Profiles Operator\", \"packageName\": \"compliance/openshift-selinuxd-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:stf:1.5\"], \"vendor\": \"Red Hat\", \"product\": \"Service Telemetry Framework 1.5\", \"packageName\": \"stf/sg-core-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:zero_trust_workload_identity_manager:1\"], \"vendor\": \"Red Hat\", \"product\": \"Zero Trust Workload Identity Manager\", \"packageName\": \"zero-trust-workload-identity-manager/spiffe-csi-driver-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:zero_trust_workload_identity_manager:0\"], \"vendor\": \"Red Hat\", \"product\": \"Zero Trust Workload Identity Manager - Tech Preview\", \"packageName\": \"zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2026-05-07T20:01:34.913Z\", \"value\": \"Reported to Red Hat.\"}, {\"lang\": \"en\", \"time\": \"2026-05-07T19:41:19.285Z\", \"value\": \"Made public.\"}], \"solutions\": [{\"lang\": \"en\", \"value\": \"RHSA-2026:42079: Red Hat Ansible Automation Platform 2.6 for RHEL 10, Red Hat Ansible Automation Platform 2.6 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:41019: RHEM 1.1 for RHEL 10, RHEM 1.1 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54191: Red Hat Enterprise Linux Server (v. 7 ELS)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42078: Red Hat Ansible Automation Platform 2.5 for RHEL 8, Red Hat Ansible Automation Platform 2.5 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:50319: Red Hat Ansible Automation Platform 2.5 for RHEL 8, Red Hat Ansible Automation Platform 2.5 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54757: Red Hat OpenStack Platform 16.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54552: Red Hat OpenShift Container Platform 4.19\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42082: Red Hat Satellite 6.16 for RHEL 8, Red Hat Satellite 6.16 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:50336: Red Hat Ansible Automation Platform 2.6 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:48151: Cryostat 4 on RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36796: RHEM 1.0 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:39810: 9Base-RHOSO-TOOLS-18, Red Hat OpenStack Services on OpenShift 18.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42150: Red Hat Satellite 6.17 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42151: Red Hat Satellite 6.18 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42240: Red Hat Satellite 6.19 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:49703: Red Hat Enterprise Linux AppStream EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:53413: Red Hat Enterprise Linux AppStream EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54168: Red Hat Enterprise Linux AppStream EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:51187: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:39272: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:35832: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:34357: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42946: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:39573: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:38504: Red Hat Enterprise Linux AppStream (v. 8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:39266: Red Hat Enterprise Linux AppStream (v. 8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36776: Red Hat Enterprise Linux AppStream (v. 8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:53412: Red Hat Enterprise Linux AppStream E4S (v.9.4)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:53415: Red Hat Enterprise Linux AppStream EUS (v.9.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:39319: Red Hat Enterprise Linux AppStream (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36617: Red Hat Enterprise Linux AppStream (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:34359: Red Hat Enterprise Linux AppStream (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54500: Compliance Operator 1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:34364: Logging Subsystem for Red Hat OpenShift 6.4\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:56340: Logging Subsystem for Red Hat OpenShift 6.5\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:50843: Logging for Red Hat OpenShift 6.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:47952: Logging for Red Hat OpenShift 6.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42852: Multicluster Global Hub 1.5.6\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:47149: Multicluster Global Hub 1.7.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:53530: Multicluster Global Hub 1.7.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:51033: OpenShift API for Data Protection 1.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:43692: OpenShift API for Data Protection 1.6\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:51057: OpenShift Developer Tools and Services 1.6.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:57191: Red Hat Advanced Cluster Management for Kubernetes 2.16\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36625: Red Hat Advanced Cluster Security for Kubernetes 4.10\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36207: Red Hat Advanced Cluster Security for Kubernetes 4.11\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36319: Red Hat Advanced Cluster Security for Kubernetes 4.9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42132: Red Hat Ansible Automation Platform 2.6\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:33574: Red Hat Developer Hub 1.9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36651: Red Hat Edge Manager 1.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:40945: Red Hat Edge Manager 1.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:40118: Red Hat Edge Manager 1.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:23262: Red Hat Hardened Images\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:23264: Red Hat Hardened Images\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54441: Red Hat Lightspeed (formerly Insights) for Runtimes 1.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:41928: Red Hat Migration Toolkit 1.8\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:50300: Red Hat Migration Toolkit for Applications 8.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:43038: Red Hat Migration Toolkit for Applications 8.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42644: Red Hat OpenShift AI 2.25\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36648: Red Hat OpenShift Builds 1.7.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54556: Red Hat OpenShift Container Platform 4.19\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54584: Red Hat OpenShift Container Platform 4.20\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54603: Red Hat OpenShift Container Platform 4.21\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54602: Red Hat OpenShift Container Platform 4.21\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:35994: Red Hat OpenShift GitOps 1.19\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:35995: Red Hat OpenShift GitOps 1.21\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:35993: Red Hat OpenShift GitOps 1.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:33120: Red Hat OpenShift Service Mesh 3.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:33123: Red Hat OpenShift Service Mesh 3.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:33142: Red Hat OpenShift Service Mesh 3.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:33150: Red Hat OpenShift Service Mesh 3.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54287: Red Hat OpenShift Workload Availability 0.12\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54284: Red Hat OpenShift Workload Availability 0.13\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54286: Red Hat OpenShift Workload Availability 0.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54285: Red Hat OpenShift Workload Availability 0.7\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54274: Red Hat OpenShift Workload Availability 0.8\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54283: Red Hat OpenShift Workload Availability 5.7\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:50205: Red Hat OpenShift distributed tracing 3.10.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:51341: Red Hat Satellite 6.18\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:51194: Red Hat Satellite 6.19\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36797: Red Hat Trusted Artifact Signer 1.4\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42043: Red Hat Web Terminal 1.11\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42047: Red Hat Web Terminal 1.12\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42050: Red Hat Web Terminal 1.13\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42051: Red Hat Web Terminal 1.14\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42049: Red Hat Web Terminal 1.15\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42048: Red Hat Web Terminal 1.16\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:41030: Red Hat multicluster global hub 1.4.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:44622: Red Hat multicluster global hub 1.6.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54435: Streams for Apache Kafka 3.2.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:46885: multicluster engine for Kubernetes 2.10\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:57194: multicluster engine for Kubernetes 2.11.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:41055: multicluster engine for Kubernetes 2.6\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:47735: multicluster engine for Kubernetes 2.8\"}], \"x_adpType\": \"supplier\", \"datePublic\": \"2026-05-07T19:41:19.285Z\", \"references\": [{\"url\": \"https://access.redhat.com/security/cve/CVE-2026-33811\", \"tags\": [\"vdb-entry\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=2467822\", \"name\": \"RHBZ#2467822\", \"tags\": [\"issue-tracking\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33811.json\", \"tags\": [\"x_sadp-csaf-vex\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42079\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:41019\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54191\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42078\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:50319\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54757\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54552\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42082\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:50336\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:48151\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36796\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:39810\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42150\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42151\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42240\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:49703\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:53413\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54168\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:51187\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:39272\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:35832\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:34357\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42946\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:39573\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:38504\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:39266\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36776\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:53412\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:53415\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:39319\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36617\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:34359\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54500\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:34364\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:56340\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:50843\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:47952\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42852\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:47149\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:53530\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:51033\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:43692\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:51057\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:57191\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36625\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36207\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36319\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42132\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:33574\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36651\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:40945\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:40118\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:23262\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:23264\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54441\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:41928\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:50300\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:43038\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42644\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36648\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54556\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54584\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54603\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54602\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:35994\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:35995\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:35993\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:33120\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:33123\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:33142\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:33150\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54287\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54284\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54286\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54285\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54274\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54283\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:50205\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:51341\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:51194\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36797\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42043\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42047\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42050\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42051\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42049\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42048\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:41030\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:44622\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54435\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:46885\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:57194\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:41055\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:47735\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}], \"workarounds\": [{\"lang\": \"en\", \"value\": \"To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.\"}], \"x_generator\": {\"engine\": \"sadp-cli 1.0.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-1341\", \"description\": \"Multiple Releases of Same Resource or Handle\"}]}], \"providerMetadata\": {\"orgId\": \"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\", \"shortName\": \"redhat-SADP\", \"dateUpdated\": \"2026-08-25T12:05:52.591Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.5, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"NONE\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-33811\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-05-08T14:25:39.702568Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-05-08T14:25:36.174Z\"}}], \"cna\": {\"title\": \"Crash when handling long CNAME response in net\", \"credits\": [{\"lang\": \"en\", \"value\": \"hamayanhamayan\"}], \"affected\": [{\"vendor\": \"Go standard library\", \"product\": \"net\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"1.25.10\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"1.26.0-0\", \"lessThan\": \"1.26.3\", \"versionType\": \"semver\"}], \"packageName\": \"net\", \"collectionURL\": \"https://pkg.go.dev\", \"defaultStatus\": \"unaffected\", \"programRoutines\": [{\"name\": \"cgoResSearch\"}, {\"name\": \"LookupCNAME\"}, {\"name\": \"Resolver.LookupCNAME\"}]}], \"references\": [{\"url\": \"https://go.dev/issue/78803\"}, {\"url\": \"https://go.dev/cl/767860\"}, {\"url\": \"https://groups.google.com/g/golang-announce/c/qcCIEXso47M\"}, {\"url\": \"https://pkg.go.dev/vuln/GO-2026-4981\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"description\": \"CWE-415: Double Free\"}]}], \"providerMetadata\": {\"orgId\": \"1bb62c36-49e3-4200-9d77-64a1400537cc\", \"shortName\": \"Go\", \"dateUpdated\": \"2026-05-07T19:41:19.285Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2026-33811\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-08-25T12:05:52.591Z\", \"dateReserved\": \"2026-03-23T20:35:32.814Z\", \"assignerOrgId\": \"1bb62c36-49e3-4200-9d77-64a1400537cc\", \"datePublished\": \"2026-05-07T19:41:19.285Z\", \"assignerShortName\": \"Go\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
RHSA-2026:47388
Vulnerability from csaf_redhat - Published: 2026-07-28 21:28 - Updated: 2026-08-26 04:27Summary
Red Hat Security Advisory: multicluster engine for Kubernetes v2.10.4 security update
Severity
Critical
Notes
Topic: Red Hat multicluster engine for Kubernetes v2.10 general availability release images, which provide security fixes, bug fixes, and updated container images.
Red Hat Product Security has rated this update as having a security impact of Critical.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section.
Details: The multicluster engine for Kubernetes provides the foundational components
that are necessary for the centralized management of multiple
Kubernetes-based clusters across data centers, public clouds, and private
clouds.
You can use the engine to create new Red Hat OpenShift Container Platform
clusters or to bring existing Kubernetes-based clusters under management by
importing them. After the clusters are managed, you can use the APIs that
are provided by the engine to distribute configuration based on placement
policy.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the archive/tar package in the Go standard library. tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A specially crafted tar archive with a pax header indicating a big number of sparse regions can cause a Go program to try to allocate a large amount of memory, causing an out-of-memory condition and resulting in a denial of service.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
120 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the Konnectivity proxy-server configuration for hosted control planes. The agent-facing listener was started without --cluster-ca-cert (and without token-based agent authentication), so client certificates were not validated. A remote attacker who can reach the Konnectivity cluster endpoint could connect as an unauthenticated agent, join the routing pool, and potentially proxy, inspect, modify, or drop control-plane-to-node traffic.
9.4 (Critical)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
120 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64 | — |
Workaround
|
Threats
Impact
Critical
A flaw was found in the cluster-proxy service-proxy component used in Red Hat Advanced Cluster Management for Kubernetes (RHACM) and multicluster-engine (MCE). The service-proxy appends impersonation group headers to proxied requests without first removing caller-supplied values, and the spoke ServiceAccount holds unrestricted impersonation permissions. An authenticated hub principal can inject an Impersonate-Group header to escalate to cluster-admin on every managed cluster.
8.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
120 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in BuildKit, a toolkit for converting source code to build artifacts. An untrusted BuildKit frontend can be leveraged to craft a malicious API message, allowing files to be written outside of the designated BuildKit state directory. This vulnerability, which is a form of arbitrary file write, could enable an attacker to execute unauthorized code or escalate their privileges on the system. This issue arises when custom BuildKit frontends are used with specific configuration options.
8.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
120 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in BuildKit. Insufficient validation of Git URL fragment subdirectory components may allow a remote attacker to access files outside the checked-out Git repository root. This access is limited to files on the same mounted filesystem. This vulnerability could lead to unauthorized information disclosure.
6.5 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
120 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
120 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
120 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.
8.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
120 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
116 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection's read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
120 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
120 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.
7.4 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x | — |
Vendor Fix
fix
|
Known not affected
120 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64 | — |
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
120 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
120 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
120 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.
8.6 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
120 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. This vulnerability, a Prototype Pollution "Gadget" attack, allows an attacker to escalate any existing Object.prototype pollution in an application's dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.
8.7 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
120 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.
7.0 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
120 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. A remote attacker, by influencing the XSRF cookie name in a browser environment, could cause the application to construct a regular expression that leads to excessive processing. This can result in a client-side Denial of Service (DoS), where the affected browser tab may freeze, impacting the availability of the application for the user.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
120 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Billy, an interface filesystem abstraction for Go. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by providing crafted or malformed input. The issue arises from insufficient validation and missing safety mechanisms when processing untrusted repository data and filesystem structures, leading to panics, infinite loops, uncontrolled recursion, or excessive resource consumption.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
120 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `sanitize-html` library. Under its default configuration, an attacker can embed malicious content within a disallowed `xmp` element. This vulnerability allows the attacker to bypass the HTML sanitization process, leading to stored Cross-Site Scripting (XSS). Successful exploitation can result in arbitrary code execution or information disclosure when a user views the affected content.
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
120 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in js-yaml, a JavaScript YAML parser and dumper. A remote attacker could exploit this vulnerability by providing a specially crafted YAML document containing a chain of mappings with merge keys. This could cause the parser to consume excessive CPU resources, leading to a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
120 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64 | — |
Workaround
|
Threats
Impact
Important
References
162 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat multicluster engine for Kubernetes v2.10 general availability release images, which provide security fixes, bug fixes, and updated container images.\n\nRed Hat Product Security has rated this update as having a security impact of Critical.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The multicluster engine for Kubernetes provides the foundational components\nthat are necessary for the centralized management of multiple\nKubernetes-based clusters across data centers, public clouds, and private\nclouds.\n\nYou can use the engine to create new Red Hat OpenShift Container Platform\nclusters or to bring existing Kubernetes-based clusters under management by\nimporting them. After the clusters are managed, you can use the APIs that\nare provided by the engine to distribute configuration based on placement\npolicy.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:47388",
"url": "https://access.redhat.com/errata/RHSA-2026:47388"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-58183",
"url": "https://access.redhat.com/security/cve/CVE-2025-58183"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-16242",
"url": "https://access.redhat.com/security/cve/CVE-2026-16242"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-17107",
"url": "https://access.redhat.com/security/cve/CVE-2026-17107"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33747",
"url": "https://access.redhat.com/security/cve/CVE-2026-33747"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33748",
"url": "https://access.redhat.com/security/cve/CVE-2026-33748"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33811",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-34986",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39828",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39829",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39830",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39835",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42508",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44486",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44487",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44488",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44492",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44494",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44495",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44496",
"url": "https://access.redhat.com/security/cve/CVE-2026-44496"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44740",
"url": "https://access.redhat.com/security/cve/CVE-2026-44740"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44990",
"url": "https://access.redhat.com/security/cve/CVE-2026-44990"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-59869",
"url": "https://access.redhat.com/security/cve/CVE-2026-59869"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_47388.json"
}
],
"title": "Red Hat Security Advisory: multicluster engine for Kubernetes v2.10.4 security update",
"tracking": {
"current_release_date": "2026-08-26T04:27:26+00:00",
"generator": {
"date": "2026-08-26T04:27:26+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:47388",
"initial_release_date": "2026-07-28T21:28:10+00:00",
"revision_history": [
{
"date": "2026-07-28T21:28:10+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-22T06:15:42+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-26T04:27:26+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "multicluster engine for Kubernetes 2.10",
"product": {
"name": "multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:multicluster_engine:2.10::el9"
}
}
}
],
"category": "product_family",
"name": "multicluster engine for Kubernetes"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"product_id": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"product_identification_helper": {
"purl": "pkg:oci/addon-manager-rhel9@sha256%3A278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/addon-manager-rhel9\u0026tag=1784331588"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"product_id": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"product_identification_helper": {
"purl": "pkg:oci/must-gather-rhel9@sha256%3A340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/must-gather-rhel9\u0026tag=1784849867"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"product_id": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"product_identification_helper": {
"purl": "pkg:oci/backplane-rhel9-operator@sha256%3A3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/backplane-rhel9-operator\u0026tag=1784913989"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-api-provider-agent-rhel9@sha256%3Adf8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9\u0026tag=1784245366"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-api-provider-aws-rhel9@sha256%3A1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9\u0026tag=1784206185"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-api-provider-kubevirt-rhel9@sha256%3A82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9\u0026tag=1785047924"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"product_id": "registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"product_identification_helper": {
"purl": "pkg:oci/capoa-bootstrap-rhel9@sha256%3A4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9\u0026tag=1784939237"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"product_id": "registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"product_identification_helper": {
"purl": "pkg:oci/capoa-control-plane-rhel9@sha256%3A0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9\u0026tag=1784939234"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"product_id": "registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/mce-capi-webhook-config-rhel9@sha256%3Abd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9\u0026tag=1784072321"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-curator-controller-rhel9@sha256%3A0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9\u0026tag=1784331574"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-image-set-controller-rhel9@sha256%3A97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9\u0026tag=1784646026"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-proxy-addon-rhel9@sha256%3A876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9\u0026tag=1784926469"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-proxy-rhel9@sha256%3Ab516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-proxy-rhel9\u0026tag=1784342329"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"product_id": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"product_identification_helper": {
"purl": "pkg:oci/clusterclaims-controller-rhel9@sha256%3Aa8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9\u0026tag=1784331577"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"product_id": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"product_identification_helper": {
"purl": "pkg:oci/clusterlifecycle-state-metrics-rhel9@sha256%3A5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9\u0026tag=1784341995"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"product_id": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/console-mce-rhel9@sha256%3A881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/console-mce-rhel9\u0026tag=1784312384"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"product_id": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"product_identification_helper": {
"purl": "pkg:oci/discovery-rhel9@sha256%3A79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/discovery-rhel9\u0026tag=1784915379"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"product_id": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"product_identification_helper": {
"purl": "pkg:oci/hive-rhel9@sha256%3A4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/hive-rhel9\u0026tag=1784896750"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-addon-rhel9-operator@sha256%3A32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator\u0026tag=1784564438"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-cli-rhel9@sha256%3A641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/hypershift-cli-rhel9\u0026tag=1784905760"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-rhel9-operator@sha256%3Aa3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/hypershift-rhel9-operator\u0026tag=1784905766"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"product_id": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"product_identification_helper": {
"purl": "pkg:oci/image-based-install-rhel9@sha256%3A2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/image-based-install-rhel9\u0026tag=1785053532"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"product_id": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"product_identification_helper": {
"purl": "pkg:oci/kube-rbac-proxy-mce-rhel9@sha256%3A92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9\u0026tag=1784677218"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"product_id": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/managed-serviceaccount-rhel9@sha256%3A3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9\u0026tag=1784683098"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"product_id": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"product_identification_helper": {
"purl": "pkg:oci/managedcluster-import-controller-rhel9@sha256%3A66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9\u0026tag=1784504317"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"product_id": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"product_identification_helper": {
"purl": "pkg:oci/multicloud-manager-rhel9@sha256%3Adffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/multicloud-manager-rhel9\u0026tag=1784309702"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"product_id": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"product_identification_helper": {
"purl": "pkg:oci/placement-rhel9@sha256%3A5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/placement-rhel9\u0026tag=1783986002"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"product_id": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"product_identification_helper": {
"purl": "pkg:oci/provider-credential-controller-rhel9@sha256%3Aad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9\u0026tag=1784117302"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"product_id": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"product_identification_helper": {
"purl": "pkg:oci/registration-rhel9@sha256%3A75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/registration-rhel9\u0026tag=1784418135"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"product_id": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"product_identification_helper": {
"purl": "pkg:oci/registration-operator-rhel9@sha256%3Ad98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/registration-operator-rhel9\u0026tag=1784683175"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64",
"product_id": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64",
"product_identification_helper": {
"purl": "pkg:oci/work-rhel9@sha256%3A8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/work-rhel9\u0026tag=1784301362"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"product_id": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"product_identification_helper": {
"purl": "pkg:oci/addon-manager-rhel9@sha256%3A8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/addon-manager-rhel9\u0026tag=1784331588"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"product_id": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"product_identification_helper": {
"purl": "pkg:oci/must-gather-rhel9@sha256%3A733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/must-gather-rhel9\u0026tag=1784849867"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"product_id": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"product_identification_helper": {
"purl": "pkg:oci/backplane-rhel9-operator@sha256%3Ae55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/backplane-rhel9-operator\u0026tag=1784913989"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-api-provider-agent-rhel9@sha256%3A73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9\u0026tag=1784245366"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-api-provider-aws-rhel9@sha256%3A65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9\u0026tag=1784206185"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-api-provider-kubevirt-rhel9@sha256%3A4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9\u0026tag=1785047924"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"product_id": "registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"product_identification_helper": {
"purl": "pkg:oci/capoa-bootstrap-rhel9@sha256%3A78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9\u0026tag=1784939237"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"product_id": "registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"product_identification_helper": {
"purl": "pkg:oci/capoa-control-plane-rhel9@sha256%3A0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9\u0026tag=1784939234"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"product_id": "registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"product_identification_helper": {
"purl": "pkg:oci/mce-capi-webhook-config-rhel9@sha256%3A4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9\u0026tag=1784072321"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-curator-controller-rhel9@sha256%3Af0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9\u0026tag=1784331574"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-image-set-controller-rhel9@sha256%3Ab57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9\u0026tag=1784646026"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-proxy-addon-rhel9@sha256%3Adb853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9\u0026tag=1784926469"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-proxy-rhel9@sha256%3Aa8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-proxy-rhel9\u0026tag=1784342329"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"product_id": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"product_identification_helper": {
"purl": "pkg:oci/clusterclaims-controller-rhel9@sha256%3Af99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9\u0026tag=1784331577"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"product_id": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"product_identification_helper": {
"purl": "pkg:oci/clusterlifecycle-state-metrics-rhel9@sha256%3Af84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9\u0026tag=1784341995"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"product_id": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"product_identification_helper": {
"purl": "pkg:oci/console-mce-rhel9@sha256%3Ac907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/console-mce-rhel9\u0026tag=1784312384"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"product_id": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"product_identification_helper": {
"purl": "pkg:oci/discovery-rhel9@sha256%3A61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/discovery-rhel9\u0026tag=1784915379"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"product_id": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"product_identification_helper": {
"purl": "pkg:oci/hive-rhel9@sha256%3A69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/hive-rhel9\u0026tag=1784896750"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-addon-rhel9-operator@sha256%3A7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator\u0026tag=1784564438"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-cli-rhel9@sha256%3Aaf9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/hypershift-cli-rhel9\u0026tag=1784905760"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-rhel9-operator@sha256%3A8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/hypershift-rhel9-operator\u0026tag=1784905766"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"product_id": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"product_identification_helper": {
"purl": "pkg:oci/image-based-install-rhel9@sha256%3A9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/image-based-install-rhel9\u0026tag=1785053532"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"product_id": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"product_identification_helper": {
"purl": "pkg:oci/kube-rbac-proxy-mce-rhel9@sha256%3A42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9\u0026tag=1784677218"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"product_id": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"product_identification_helper": {
"purl": "pkg:oci/managed-serviceaccount-rhel9@sha256%3Afd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9\u0026tag=1784683098"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"product_id": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"product_identification_helper": {
"purl": "pkg:oci/managedcluster-import-controller-rhel9@sha256%3A3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9\u0026tag=1784504317"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"product_id": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"product_identification_helper": {
"purl": "pkg:oci/multicloud-manager-rhel9@sha256%3A2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/multicloud-manager-rhel9\u0026tag=1784309702"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"product_id": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"product_identification_helper": {
"purl": "pkg:oci/placement-rhel9@sha256%3Ae82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/placement-rhel9\u0026tag=1783986002"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"product_id": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"product_identification_helper": {
"purl": "pkg:oci/provider-credential-controller-rhel9@sha256%3A76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9\u0026tag=1784117302"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"product_id": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"product_identification_helper": {
"purl": "pkg:oci/registration-rhel9@sha256%3A7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/registration-rhel9\u0026tag=1784418135"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"product_id": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"product_identification_helper": {
"purl": "pkg:oci/registration-operator-rhel9@sha256%3Ad9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/registration-operator-rhel9\u0026tag=1784683175"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"product_id": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"product_identification_helper": {
"purl": "pkg:oci/work-rhel9@sha256%3A748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/work-rhel9\u0026tag=1784301362"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/addon-manager-rhel9@sha256%3A4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/addon-manager-rhel9\u0026tag=1784331588"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/must-gather-rhel9@sha256%3A88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/must-gather-rhel9\u0026tag=1784849867"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/backplane-rhel9-operator@sha256%3Ae4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/backplane-rhel9-operator\u0026tag=1784913989"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/cluster-api-provider-agent-rhel9@sha256%3A18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9\u0026tag=1784245366"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/cluster-api-provider-aws-rhel9@sha256%3A867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9\u0026tag=1784206185"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/cluster-api-provider-kubevirt-rhel9@sha256%3Ac0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9\u0026tag=1785047924"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/capoa-bootstrap-rhel9@sha256%3A6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9\u0026tag=1784939237"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/capoa-control-plane-rhel9@sha256%3Ad9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9\u0026tag=1784939234"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/mce-capi-webhook-config-rhel9@sha256%3A5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9\u0026tag=1784072321"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/cluster-curator-controller-rhel9@sha256%3Afda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9\u0026tag=1784331574"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/cluster-image-set-controller-rhel9@sha256%3A6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9\u0026tag=1784646026"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/cluster-proxy-addon-rhel9@sha256%3Af3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9\u0026tag=1784926469"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/cluster-proxy-rhel9@sha256%3Ad53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-proxy-rhel9\u0026tag=1784342329"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/clusterclaims-controller-rhel9@sha256%3Adcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9\u0026tag=1784331577"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/clusterlifecycle-state-metrics-rhel9@sha256%3A303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9\u0026tag=1784341995"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/console-mce-rhel9@sha256%3A6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/console-mce-rhel9\u0026tag=1784312384"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/discovery-rhel9@sha256%3Af5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/discovery-rhel9\u0026tag=1784915379"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/hive-rhel9@sha256%3A467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/hive-rhel9\u0026tag=1784896750"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-addon-rhel9-operator@sha256%3A43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator\u0026tag=1784564438"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-cli-rhel9@sha256%3A0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/hypershift-cli-rhel9\u0026tag=1784905760"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-rhel9-operator@sha256%3A7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/hypershift-rhel9-operator\u0026tag=1784905766"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/image-based-install-rhel9@sha256%3A0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/image-based-install-rhel9\u0026tag=1785053532"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/kube-rbac-proxy-mce-rhel9@sha256%3A2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9\u0026tag=1784677218"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/managed-serviceaccount-rhel9@sha256%3A187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9\u0026tag=1784683098"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/managedcluster-import-controller-rhel9@sha256%3Aa4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9\u0026tag=1784504317"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/multicloud-manager-rhel9@sha256%3A9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/multicloud-manager-rhel9\u0026tag=1784309702"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/placement-rhel9@sha256%3Afe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/placement-rhel9\u0026tag=1783986002"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/provider-credential-controller-rhel9@sha256%3Ab9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9\u0026tag=1784117302"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/registration-rhel9@sha256%3Ac46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/registration-rhel9\u0026tag=1784418135"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/registration-operator-rhel9@sha256%3A52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/registration-operator-rhel9\u0026tag=1784683175"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/work-rhel9@sha256%3A100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/work-rhel9\u0026tag=1784301362"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"product_id": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"product_identification_helper": {
"purl": "pkg:oci/addon-manager-rhel9@sha256%3A136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/addon-manager-rhel9\u0026tag=1784331588"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"product_id": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"product_identification_helper": {
"purl": "pkg:oci/must-gather-rhel9@sha256%3A435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/must-gather-rhel9\u0026tag=1784849867"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"product_id": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"product_identification_helper": {
"purl": "pkg:oci/backplane-rhel9-operator@sha256%3A9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/backplane-rhel9-operator\u0026tag=1784913989"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"product_id": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"product_identification_helper": {
"purl": "pkg:oci/cluster-api-provider-agent-rhel9@sha256%3Aa749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9\u0026tag=1784245366"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"product_id": "registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"product_identification_helper": {
"purl": "pkg:oci/cluster-api-provider-aws-rhel9@sha256%3A7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9\u0026tag=1784206185"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"product_id": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"product_identification_helper": {
"purl": "pkg:oci/cluster-api-provider-kubevirt-rhel9@sha256%3A00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9\u0026tag=1785047924"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"product_id": "registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"product_identification_helper": {
"purl": "pkg:oci/capoa-bootstrap-rhel9@sha256%3Add602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9\u0026tag=1784939237"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"product_id": "registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"product_identification_helper": {
"purl": "pkg:oci/capoa-control-plane-rhel9@sha256%3A742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9\u0026tag=1784939234"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"product_id": "registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"product_identification_helper": {
"purl": "pkg:oci/mce-capi-webhook-config-rhel9@sha256%3A2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9\u0026tag=1784072321"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"product_id": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"product_identification_helper": {
"purl": "pkg:oci/cluster-curator-controller-rhel9@sha256%3Ab4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9\u0026tag=1784331574"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"product_id": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"product_identification_helper": {
"purl": "pkg:oci/cluster-image-set-controller-rhel9@sha256%3Adca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9\u0026tag=1784646026"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"product_id": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"product_identification_helper": {
"purl": "pkg:oci/cluster-proxy-addon-rhel9@sha256%3A83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9\u0026tag=1784926469"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"product_id": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"product_identification_helper": {
"purl": "pkg:oci/cluster-proxy-rhel9@sha256%3A9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-proxy-rhel9\u0026tag=1784342329"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"product_id": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"product_identification_helper": {
"purl": "pkg:oci/clusterclaims-controller-rhel9@sha256%3A44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9\u0026tag=1784331577"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"product_id": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"product_identification_helper": {
"purl": "pkg:oci/clusterlifecycle-state-metrics-rhel9@sha256%3Ac446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9\u0026tag=1784341995"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"product_id": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"product_identification_helper": {
"purl": "pkg:oci/console-mce-rhel9@sha256%3A17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/console-mce-rhel9\u0026tag=1784312384"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"product_id": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"product_identification_helper": {
"purl": "pkg:oci/discovery-rhel9@sha256%3A09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/discovery-rhel9\u0026tag=1784915379"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"product_id": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"product_identification_helper": {
"purl": "pkg:oci/hive-rhel9@sha256%3A6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/hive-rhel9\u0026tag=1784896750"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-addon-rhel9-operator@sha256%3Acd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator\u0026tag=1784564438"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-cli-rhel9@sha256%3Ab7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/hypershift-cli-rhel9\u0026tag=1784905760"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-rhel9-operator@sha256%3A5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/hypershift-rhel9-operator\u0026tag=1784905766"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"product_id": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"product_identification_helper": {
"purl": "pkg:oci/image-based-install-rhel9@sha256%3Ad944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/image-based-install-rhel9\u0026tag=1785053532"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"product_id": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"product_identification_helper": {
"purl": "pkg:oci/kube-rbac-proxy-mce-rhel9@sha256%3A244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9\u0026tag=1784677218"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"product_id": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"product_identification_helper": {
"purl": "pkg:oci/managed-serviceaccount-rhel9@sha256%3Aa10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9\u0026tag=1784683098"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"product_id": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"product_identification_helper": {
"purl": "pkg:oci/managedcluster-import-controller-rhel9@sha256%3Aad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9\u0026tag=1784504317"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"product_id": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"product_identification_helper": {
"purl": "pkg:oci/multicloud-manager-rhel9@sha256%3A10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/multicloud-manager-rhel9\u0026tag=1784309702"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"product_id": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"product_identification_helper": {
"purl": "pkg:oci/placement-rhel9@sha256%3A87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/placement-rhel9\u0026tag=1783986002"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"product_id": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"product_identification_helper": {
"purl": "pkg:oci/provider-credential-controller-rhel9@sha256%3A362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9\u0026tag=1784117302"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"product_id": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"product_identification_helper": {
"purl": "pkg:oci/registration-rhel9@sha256%3Ac229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/registration-rhel9\u0026tag=1784418135"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"product_id": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"product_identification_helper": {
"purl": "pkg:oci/registration-operator-rhel9@sha256%3A5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/registration-operator-rhel9\u0026tag=1784683175"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"product_id": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"product_identification_helper": {
"purl": "pkg:oci/work-rhel9@sha256%3A121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/work-rhel9\u0026tag=1784301362"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-58183",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2025-10-29T23:01:50.573951+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2407258"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the archive/tar package in the Go standard library. tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A specially crafted tar archive with a pax header indicating a big number of sparse regions can cause a Go program to try to allocate a large amount of memory, causing an out-of-memory condition and resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: archive/tar: Unbounded allocation when parsing GNU sparse map",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to be able to process a specially crafted GNU tar pax 1.0 archive with the application using the archive/tar package. Additionally, this issue can cause the Go application to allocate a large amount of memory, eventually leading to an out-of-memory condition and resulting in a denial of service with no other security impact. Due to these reasons, this flaw has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-58183"
},
{
"category": "external",
"summary": "RHBZ#2407258",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2407258"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-58183",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-58183"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-58183",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-58183"
},
{
"category": "external",
"summary": "https://go.dev/cl/709861",
"url": "https://go.dev/cl/709861"
},
{
"category": "external",
"summary": "https://go.dev/issue/75677",
"url": "https://go.dev/issue/75677"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI",
"url": "https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-4014",
"url": "https://pkg.go.dev/vuln/GO-2025-4014"
}
],
"release_date": "2025-10-29T22:10:14.376000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-28T21:28:10+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47388"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: archive/tar: Unbounded allocation when parsing GNU sparse map"
},
{
"acknowledgments": [
{
"names": [
"Microsoft Security Research (MSRC)"
],
"organization": "Microsoft"
}
],
"cve": "CVE-2026-16242",
"cwe": {
"id": "CWE-306",
"name": "Missing Authentication for Critical Function"
},
"discovery_date": "2026-07-20T04:50:48.621000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2502690"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Konnectivity proxy-server configuration for hosted control planes. The agent-facing listener was started without --cluster-ca-cert (and without token-based agent authentication), so client certificates were not validated. A remote attacker who can reach the Konnectivity cluster endpoint could connect as an unauthenticated agent, join the routing pool, and potentially proxy, inspect, modify, or drop control-plane-to-node traffic.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "hypershift: Konnectivity proxy-server accepts agent connections without validating client certificates",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw in the Konnectivity proxy-server used by hosted control planes allows a remote, unauthenticated attacker who can reach the agent-facing (cluster) endpoint to establish an agent connection without presenting a client certificate signed by the hosted cluster\u2019s Konnectivity CA, and without using token-based agent authentication. Because that endpoint is exposed so worker agents can connect, a successful attack can enroll an untrusted agent in the routing pool. When the proxy selects that stream for a control-plane dial, the attacker may proxy, inspect, modify, or drop control-plane-to-node traffic, affecting confidentiality, integrity, and availability of that path.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-16242"
},
{
"category": "external",
"summary": "RHBZ#2502690",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2502690"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-16242",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-16242"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-16242",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16242"
},
{
"category": "external",
"summary": "https://github.com/openshift/hypershift/pull/9031",
"url": "https://github.com/openshift/hypershift/pull/9031"
}
],
"release_date": "2026-07-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-28T21:28:10+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47388"
},
{
"category": "workaround",
"details": "Until an update that configures Konnectivity agent authentication is applied, restrict network access to the Konnectivity cluster (agent) endpoint so that only trusted worker networks can reach it. For NodePort or LoadBalancer publishing, limit ingress to port 8091 to worker node subnet ranges. For Route-based publishing, restrict access to the Konnectivity route to trusted networks where possible. These controls reduce the chance that an unauthenticated attacker can reach the agent listener; they do not replace proper agent client-certificate (or token) authentication.",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 9.4,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "hypershift: Konnectivity proxy-server accepts agent connections without validating client certificates"
},
{
"acknowledgments": [
{
"names": [
"Kahiro Okina"
],
"organization": "Craftsman Software, Inc."
},
{
"names": [
"Arpit Jain"
],
"organization": "GitHub: arpitjain099"
}
],
"cve": "CVE-2026-17107",
"cwe": {
"id": "CWE-441",
"name": "Unintended Proxy or Intermediary (\u0027Confused Deputy\u0027)"
},
"discovery_date": "2026-05-22T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2506771"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the cluster-proxy service-proxy component used in Red Hat Advanced Cluster Management for Kubernetes (RHACM) and multicluster-engine (MCE). The service-proxy appends impersonation group headers to proxied requests without first removing caller-supplied values, and the spoke ServiceAccount holds unrestricted impersonation permissions. An authenticated hub principal can inject an Impersonate-Group header to escalate to cluster-admin on every managed cluster.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "cluster-proxy: cluster-proxy: Impersonation header injection in service-proxy grants cluster-admin on every managed cluster",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in the cluster-proxy service-proxy component of Red Hat Advanced Cluster Management for Kubernetes and multicluster-engine that allows an authenticated hub principal to escalate privileges to cluster-admin across all managed clusters. This is due to improper handling of impersonation group headers, enabling unauthorized administrative access. While the impact of successful exploitation is severe, the attack requires authenticated access to the ACM hub cluster, which is a management-plane component not typically exposed to untrusted networks. Exploitation also depends on knowledge of the cluster-proxy architecture and deliberate construction of requests targeting specific managed clusters. These prerequisites significantly reduce the likelihood of opportunistic or widespread exploitation.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-17107"
},
{
"category": "external",
"summary": "RHBZ#2506771",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2506771"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-17107",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-17107"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-17107",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-17107"
}
],
"release_date": "2026-07-24T18:49:48.386000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-28T21:28:10+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47388"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "cluster-proxy: cluster-proxy: Impersonation header injection in service-proxy grants cluster-admin on every managed cluster"
},
{
"cve": "CVE-2026-33747",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-03-27T02:01:29.921765+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2452076"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in BuildKit, a toolkit for converting source code to build artifacts. An untrusted BuildKit frontend can be leveraged to craft a malicious API message, allowing files to be written outside of the designated BuildKit state directory. This vulnerability, which is a form of arbitrary file write, could enable an attacker to execute unauthorized code or escalate their privileges on the system. This issue arises when custom BuildKit frontends are used with specific configuration options.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "BuildKit: github.com/moby/buildkit: BuildKit: Arbitrary file write and code execution via untrusted frontend",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33747"
},
{
"category": "external",
"summary": "RHBZ#2452076",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452076"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33747",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33747"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33747",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33747"
},
{
"category": "external",
"summary": "https://github.com/moby/buildkit/releases/tag/v0.28.1",
"url": "https://github.com/moby/buildkit/releases/tag/v0.28.1"
},
{
"category": "external",
"summary": "https://github.com/moby/buildkit/security/advisories/GHSA-4c29-8rgm-jvjj",
"url": "https://github.com/moby/buildkit/security/advisories/GHSA-4c29-8rgm-jvjj"
}
],
"release_date": "2026-03-27T00:49:06.165000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-28T21:28:10+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47388"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, avoid using untrusted BuildKit frontends. Restrict the use of custom BuildKit frontends to only those from verified and trusted sources. Do not specify untrusted frontends via `#syntax` or `--build-arg BUILDKIT_SYNTAX`.",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "BuildKit: github.com/moby/buildkit: BuildKit: Arbitrary file write and code execution via untrusted frontend"
},
{
"cve": "CVE-2026-33748",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-03-27T15:02:00.107493+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2452271"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in BuildKit. Insufficient validation of Git URL fragment subdirectory components may allow a remote attacker to access files outside the checked-out Git repository root. This access is limited to files on the same mounted filesystem. This vulnerability could lead to unauthorized information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/moby/buildkit: BuildKit: Unauthorized file access via Git URL fragment subdir components",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33748"
},
{
"category": "external",
"summary": "RHBZ#2452271",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452271"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33748",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33748"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33748",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33748"
},
{
"category": "external",
"summary": "https://docs.docker.com/build/concepts/context/#url-fragments",
"url": "https://docs.docker.com/build/concepts/context/#url-fragments"
},
{
"category": "external",
"summary": "https://github.com/moby/buildkit/releases/tag/v0.28.1",
"url": "https://github.com/moby/buildkit/releases/tag/v0.28.1"
},
{
"category": "external",
"summary": "https://github.com/moby/buildkit/security/advisories/GHSA-4vrq-3vrq-g6gg",
"url": "https://github.com/moby/buildkit/security/advisories/GHSA-4vrq-3vrq-g6gg"
}
],
"release_date": "2026-03-27T14:00:21.200000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-28T21:28:10+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47388"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "github.com/moby/buildkit: BuildKit: Unauthorized file access via Git URL fragment subdir components"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-28T21:28:10+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47388"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-34986",
"cwe": {
"id": "CWE-131",
"name": "Incorrect Calculation of Buffer Size"
},
"discovery_date": "2026-04-06T17:01:34.639203+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2455470"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "RHBZ#2455470",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455470"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-34986",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34986"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8",
"url": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants",
"url": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants"
}
],
"release_date": "2026-04-06T16:22:45.353000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-28T21:28:10+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47388"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object"
},
{
"cve": "CVE-2026-39828",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:46.775641+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480687"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important security flaw in the `golang.org/x/crypto/ssh` library. When an SSH server utilizing this library is configured with specific authentication callbacks that return a `PartialSuccessError` with non-nil permissions, an attacker could bypass intended certificate restrictions, such as `force-command`. This bypass could lead to unauthorized command execution or access on affected Red Hat systems configured with multi-factor authentication and certificate-based access controls.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "RHBZ#2480687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480687"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39828",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39828"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://go.dev/cl/781621",
"url": "https://go.dev/cl/781621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79562",
"url": "https://go.dev/issue/79562"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5014",
"url": "https://pkg.go.dev/vuln/GO-2026-5014"
}
],
"release_date": "2026-05-22T02:31:26.883000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-28T21:28:10+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47388"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions"
},
{
"cve": "CVE-2026-39829",
"cwe": {
"id": "CWE-1284",
"name": "Improper Validation of Specified Quantity in Input"
},
"discovery_date": "2026-05-22T04:01:30.092249+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480681"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in golang.org/x/crypto/ssh is rated as Important. An unauthenticated remote attacker could trigger a denial of service by providing a specially crafted public key with excessively large parameters during SSH public key authentication. This could lead to prolonged CPU consumption on the server, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "RHBZ#2480681",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480681"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39829",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39829"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://go.dev/cl/781641",
"url": "https://go.dev/cl/781641"
},
{
"category": "external",
"summary": "https://go.dev/cl/781661",
"url": "https://go.dev/cl/781661"
},
{
"category": "external",
"summary": "https://go.dev/issue/79565",
"url": "https://go.dev/issue/79565"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5018",
"url": "https://pkg.go.dev/vuln/GO-2026-5018"
}
],
"release_date": "2026-05-22T02:31:27.324000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-28T21:28:10+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47388"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters"
},
{
"cve": "CVE-2026-39830",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2026-05-22T04:01:38.517202+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection\u0027s read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh`. A remote, unauthenticated attacker can exploit this vulnerability by sending unsolicited global request responses to an affected SSH server, leading to resource exhaustion and a denial of service. The impact is considered Important due to the potential for unauthenticated remote disruption of services utilizing the vulnerable SSH library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "RHBZ#2480684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39830",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39830"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://go.dev/cl/781640",
"url": "https://go.dev/cl/781640"
},
{
"category": "external",
"summary": "https://go.dev/cl/781664",
"url": "https://go.dev/cl/781664"
},
{
"category": "external",
"summary": "https://go.dev/issue/79564",
"url": "https://go.dev/issue/79564"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5017",
"url": "https://pkg.go.dev/vuln/GO-2026-5017"
}
],
"release_date": "2026-05-22T02:31:27.208000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-28T21:28:10+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47388"
},
{
"category": "workaround",
"details": "To mitigate this denial of service vulnerability, restrict network access to any service that utilizes the `golang.org/x/crypto/ssh` library and is exposed to untrusted networks. Implement firewall rules to allow connections only from trusted hosts or networks. This action limits the ability of malicious peers to send unsolicited global request responses. A restart of the affected service may be necessary for the new network rules to be applied effectively.",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses"
},
{
"cve": "CVE-2026-39835",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-05-22T04:01:27.279943+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480680"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh` affecting SSH servers that utilize `CertChecker` as a public key callback without explicitly configuring `IsUserAuthority` or `IsHostAuthority`. A remote, unauthenticated attacker can trigger a server panic by presenting a specially crafted certificate, leading to service disruption. Exploitation requires a specific, non-default configuration of the `CertChecker`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "RHBZ#2480680",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480680"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39835",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39835"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://go.dev/cl/781660",
"url": "https://go.dev/cl/781660"
},
{
"category": "external",
"summary": "https://go.dev/issue/79563",
"url": "https://go.dev/issue/79563"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5015",
"url": "https://pkg.go.dev/vuln/GO-2026-5015"
}
],
"release_date": "2026-05-22T02:31:26.982000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-28T21:28:10+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47388"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate"
},
{
"cve": "CVE-2026-42508",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-05-22T04:01:49.515058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480688"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in `golang.org/x/crypto/ssh/knownhosts` allows a remote attacker to bypass security checks. This vulnerability arises because the system fails to properly verify the revocation status of a Certificate Authority (CA) `SignatureKey`. In Red Hat environments, this could enable an attacker to present a revoked key, leading to its acceptance as valid and potentially granting unauthorized access or facilitating the spoofing of legitimate entities.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "RHBZ#2480688",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480688"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42508",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42508"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://go.dev/cl/781220",
"url": "https://go.dev/cl/781220"
},
{
"category": "external",
"summary": "https://go.dev/issue/79568",
"url": "https://go.dev/issue/79568"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5021",
"url": "https://pkg.go.dev/vuln/GO-2026-5021"
}
],
"release_date": "2026-05-22T02:31:27.644000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-28T21:28:10+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47388"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey"
},
{
"cve": "CVE-2026-44486",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:30.944384+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487947"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in the Axios Node.js HTTP adapter. Red Hat products utilizing Axios in a Node.js environment with an authenticated proxy and automatic redirects enabled are susceptible. The vulnerability arises when a request, initially sent through an authenticated proxy, is redirected to a target that no longer uses the proxy, potentially leaking `Proxy-Authorization` headers containing sensitive credentials to an untrusted remote server. This risk is heightened in deployments where applications interact with untrusted HTTP origins.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "RHBZ#2487947",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487947"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44486",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44486"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc",
"url": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc"
}
],
"release_date": "2026-06-11T15:39:07.714000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-28T21:28:10+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47388"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects"
},
{
"cve": "CVE-2026-44487",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:34.091476+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487948"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via redirect flows",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in Axios affecting Node.js environments. When an application uses Axios with an authenticated HTTP proxy and follows redirects from an HTTP to a non-proxied HTTPS destination, the Proxy-Authorization header may be inadvertently sent to the final origin server. This could lead to the exposure of sensitive proxy credentials to an unintended third party.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "RHBZ#2487948",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487948"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44487",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44487"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v",
"url": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v"
}
],
"release_date": "2026-06-11T15:38:25.150000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-28T21:28:10+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47388"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via redirect flows"
},
{
"cve": "CVE-2026-44488",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-11T17:01:36.836488+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487949"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Denial of Service due to unenforced request and response size limits",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A denial of service flaw was found in Axios, a JavaScript HTTP client library. This issue arises when applications utilize the `fetch` adapter, as configured request and response size limits are not properly enforced. A remote attacker could exploit this by sending or receiving excessively large data bodies, leading to resource exhaustion and potential denial of service in affected server-side applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "RHBZ#2487949",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487949"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44488",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44488"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf"
}
],
"release_date": "2026-06-11T15:37:38.013000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-28T21:28:10+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47388"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Denial of Service due to unenforced request and response size limits"
},
{
"cve": "CVE-2026-44492",
"cwe": {
"id": "CWE-289",
"name": "Authentication Bypass by Alternate Name"
},
"discovery_date": "2026-06-11T17:00:56.761751+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487938"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in Axios, a JavaScript HTTP client library, that allows for a proxy bypass. When a `NO_PROXY` environment variable is configured to prevent direct connections to specific IPv4 addresses, an attacker can craft a request URL using the IPv4-mapped IPv6 address format. This bypasses the intended `NO_PROXY` exclusion, routing the request through the configured proxy and potentially exposing internal services or sensitive information, such as cloud instance metadata credentials.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "RHBZ#2487938",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487938"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44492",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44492"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv",
"url": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv"
}
],
"release_date": "2026-06-11T15:29:13.890000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-28T21:28:10+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47388"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization"
},
{
"cve": "CVE-2026-44494",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:01:12.945664+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487942"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. This vulnerability, a Prototype Pollution \"Gadget\" attack, allows an attacker to escalate any existing Object.prototype pollution in an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in the Axios library allows an attacker to escalate existing prototype pollution vulnerabilities within an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. By injecting a malicious proxy configuration into the `Object.prototype`, an attacker can intercept, read, and modify all HTTP traffic, including sensitive authentication credentials, without direct user interaction. This poses a significant risk to data confidentiality and integrity in Red Hat products that utilize the Axios library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "RHBZ#2487942",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487942"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44494",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44494"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh",
"url": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh"
}
],
"release_date": "2026-06-11T15:32:03.155000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-28T21:28:10+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47388"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution"
},
{
"cve": "CVE-2026-44495",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:00:53.999811+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487937"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure due to prototype pollution vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in Axios, a promise-based HTTP client, can lead to information disclosure, including credential theft and response hijacking, or denial of service. Exploitation requires a separate prototype pollution vulnerability in the same JavaScript process, allowing an attacker to control `Object.prototype.transformResponse`. Red Hat products using affected Axios versions are at risk if another component introduces such pollution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "RHBZ#2487937",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487937"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44495",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44495"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw",
"url": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw"
}
],
"release_date": "2026-06-11T15:33:12.433000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-28T21:28:10+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47388"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure due to prototype pollution vulnerability"
},
{
"cve": "CVE-2026-44496",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-06-11T17:01:15.856386+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487943"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. A remote attacker, by influencing the XSRF cookie name in a browser environment, could cause the application to construct a regular expression that leads to excessive processing. This can result in a client-side Denial of Service (DoS), where the affected browser tab may freeze, impacting the availability of the application for the user.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in Axios can lead to a client-side Denial of Service. An attacker capable of influencing the XSRF cookie name within a browser environment could trigger excessive regular expression processing, causing the affected browser tab to freeze and degrade user availability. This issue specifically impacts browser-based applications and does not affect Node.js HTTP adapter usage, React Native, or web workers.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44496"
},
{
"category": "external",
"summary": "RHBZ#2487943",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487943"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44496",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44496"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44496",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44496"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-hfxv-24rg-xrqf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-hfxv-24rg-xrqf"
}
],
"release_date": "2026-06-11T15:34:28.492000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-28T21:28:10+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47388"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name"
},
{
"cve": "CVE-2026-44740",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-06-01T17:01:53.685793+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2483894"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Billy, an interface filesystem abstraction for Go. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by providing crafted or malformed input. The issue arises from insufficient validation and missing safety mechanisms when processing untrusted repository data and filesystem structures, leading to panics, infinite loops, uncontrolled recursion, or excessive resource consumption.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/go-git/go-billy: Billy: Denial of Service via crafted input due to insufficient validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is rated as an Important severity issue. The `go-billy` library, a Go filesystem abstraction, is vulnerable to a denial of service when processing crafted or malformed input, such as untrusted repository data or filesystem structures. Insufficient validation and missing safety mechanisms can lead to panics, infinite loops, or excessive resource consumption, potentially impacting the availability of applications that rely on this library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44740"
},
{
"category": "external",
"summary": "RHBZ#2483894",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2483894"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44740",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44740"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44740",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44740"
},
{
"category": "external",
"summary": "https://github.com/go-git/go-billy/releases/tag/v5.9.0",
"url": "https://github.com/go-git/go-billy/releases/tag/v5.9.0"
},
{
"category": "external",
"summary": "https://github.com/go-git/go-billy/releases/tag/v6.0.0-alpha.1",
"url": "https://github.com/go-git/go-billy/releases/tag/v6.0.0-alpha.1"
},
{
"category": "external",
"summary": "https://github.com/go-git/go-billy/security/advisories/GHSA-m3xc-h892-ggx6",
"url": "https://github.com/go-git/go-billy/security/advisories/GHSA-m3xc-h892-ggx6"
}
],
"release_date": "2026-06-01T16:04:50.358000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-28T21:28:10+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47388"
},
{
"category": "workaround",
"details": "To mitigate the issue, we suggest upgrading to versions 5.9.0+ or 6.0.0-alpha.1+",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/go-git/go-billy: Billy: Denial of Service via crafted input due to insufficient validation"
},
{
"cve": "CVE-2026-44990",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-06-12T21:02:24.911971+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488565"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `sanitize-html` library. Under its default configuration, an attacker can embed malicious content within a disallowed `xmp` element. This vulnerability allows the attacker to bypass the HTML sanitization process, leading to stored Cross-Site Scripting (XSS). Successful exploitation can result in arbitrary code execution or information disclosure when a user views the affected content.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "sanitize-html: `sanitize-html`: Stored Cross-Site Scripting via HTML sanitizer bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw. The `sanitize-html` library, used in Red Hat products, is susceptible to a stored Cross-Site Scripting (XSS) bypass. Malicious content within a disallowed `xmp` element can be rendered as live HTML or JavaScript due to a sanitizer bypass in the default configuration. This can lead to arbitrary code execution or information disclosure when affected content is viewed.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44990"
},
{
"category": "external",
"summary": "RHBZ#2488565",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488565"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44990",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44990"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44990",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44990"
},
{
"category": "external",
"summary": "https://github.com/apostrophecms/apostrophe/security/advisories/GHSA-rpr9-rxv7-x643",
"url": "https://github.com/apostrophecms/apostrophe/security/advisories/GHSA-rpr9-rxv7-x643"
}
],
"release_date": "2026-06-12T20:39:47.065000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-28T21:28:10+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47388"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "sanitize-html: `sanitize-html`: Stored Cross-Site Scripting via HTML sanitizer bypass"
},
{
"cve": "CVE-2026-59869",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-07-08T16:01:38.408322+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2498122"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in js-yaml, a JavaScript YAML parser and dumper. A remote attacker could exploit this vulnerability by providing a specially crafted YAML document containing a chain of mappings with merge keys. This could cause the parser to consume excessive CPU resources, leading to a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "js-yaml: js-yaml: Denial of Service via crafted YAML documents",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as Important. Red Hat products utilizing `js-yaml` to process untrusted YAML input are susceptible to a denial of service, as a remote attacker can provide a crafted document that consumes excessive CPU resources. This is considered Important due to the potential for service disruption without requiring authentication or complex attack vectors.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-59869"
},
{
"category": "external",
"summary": "RHBZ#2498122",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498122"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-59869",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-59869"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59869",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59869"
},
{
"category": "external",
"summary": "https://github.com/nodeca/js-yaml/commit/24f13e79ee1343a7e30bd6f6c9d9cdbf0ac9b2b7",
"url": "https://github.com/nodeca/js-yaml/commit/24f13e79ee1343a7e30bd6f6c9d9cdbf0ac9b2b7"
},
{
"category": "external",
"summary": "https://github.com/nodeca/js-yaml/commit/59423c6f8cdc78742ac00e25a4dd39ef16b702e4",
"url": "https://github.com/nodeca/js-yaml/commit/59423c6f8cdc78742ac00e25a4dd39ef16b702e4"
},
{
"category": "external",
"summary": "https://github.com/nodeca/js-yaml/releases/tag/3.15.0",
"url": "https://github.com/nodeca/js-yaml/releases/tag/3.15.0"
},
{
"category": "external",
"summary": "https://github.com/nodeca/js-yaml/releases/tag/4.3.0",
"url": "https://github.com/nodeca/js-yaml/releases/tag/4.3.0"
},
{
"category": "external",
"summary": "https://github.com/nodeca/js-yaml/security/advisories/GHSA-52cp-r559-cp3m",
"url": "https://github.com/nodeca/js-yaml/security/advisories/GHSA-52cp-r559-cp3m"
}
],
"release_date": "2026-07-08T15:15:54.675000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-28T21:28:10+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47388"
},
{
"category": "workaround",
"details": "To reduce exposure, restrict the processing of untrusted YAML documents by applications that rely on `js-yaml`. Implement robust input validation and sanitization for all YAML data originating from external or untrusted sources. Consider limiting network access to services that parse YAML content to trusted networks or clients through appropriate firewall configurations.",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "js-yaml: js-yaml: Denial of Service via crafted YAML documents"
}
]
}
RHSA-2026:47735
Vulnerability from csaf_redhat - Published: 2026-07-29 07:36 - Updated: 2026-08-26 04:26Summary
Red Hat Security Advisory: multicluster engine for Kubernetes v2.8.9 security update
Severity
Critical
Notes
Topic: Red Hat multicluster engine for Kubernetes v2.8 general availability release images, which provide security fixes, bug fixes, and updated container images.
Red Hat Product Security has rated this update as having a security impact of Critical.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section.
Details: The multicluster engine for Kubernetes provides the foundational components
that are necessary for the centralized management of multiple
Kubernetes-based clusters across data centers, public clouds, and private
clouds.
You can use the engine to create new Red Hat OpenShift Container Platform
clusters or to bring existing Kubernetes-based clusters under management by
importing them. After the clusters are managed, you can use the APIs that
are provided by the engine to distribute configuration based on placement
policy.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the Konnectivity proxy-server configuration for hosted control planes. The agent-facing listener was started without --cluster-ca-cert (and without token-based agent authentication), so client certificates were not validated. A remote attacker who can reach the Konnectivity cluster endpoint could connect as an unauthenticated agent, join the routing pool, and potentially proxy, inspect, modify, or drop control-plane-to-node traffic.
9.4 (Critical)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
104 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le | — |
Workaround
|
Threats
Impact
Critical
A flaw was found in the cluster-proxy service-proxy component used in Red Hat Advanced Cluster Management for Kubernetes (RHACM) and multicluster-engine (MCE). The service-proxy appends impersonation group headers to proxied requests without first removing caller-supplied values, and the spoke ServiceAccount holds unrestricted impersonation permissions. An authenticated hub principal can inject an Impersonate-Group header to escalate to cluster-admin on every managed cluster.
8.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
104 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
104 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.
8.1 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
100 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.
7.5 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
96 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in OpenTelemetry-Go, the Go implementation of OpenTelemetry. A remote attacker can exploit this vulnerability by sending multiple 'baggage' header lines. The system's independent parsing and aggregation of each header field-value across multiple values can lead to amplified CPU and memory allocations, resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le | — |
Vendor Fix
fix
|
Known not affected
104 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le | — |
Threats
Impact
Important
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
104 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
100 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.
8.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
104 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
100 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection's read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
104 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
104 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.
7.4 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le | — |
Vendor Fix
fix
|
Known not affected
104 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le | — |
Threats
Impact
Important
A flaw was found in Billy, an interface filesystem abstraction for Go. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by providing crafted or malformed input. The issue arises from insufficient validation and missing safety mechanisms when processing untrusted repository data and filesystem structures, leading to panics, infinite loops, uncontrolled recursion, or excessive resource consumption.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
104 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `sanitize-html` library. Under its default configuration, an attacker can embed malicious content within a disallowed `xmp` element. This vulnerability allows the attacker to bypass the HTML sanitization process, leading to stored Cross-Site Scripting (XSS). Successful exploitation can result in arbitrary code execution or information disclosure when a user views the affected content.
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
104 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in OpenSSL. When processing a specially crafted PKCS#7 or S/MIME (Secure/Multipurpose Internet Mail Extensions) signed message, a heap use-after-free vulnerability in the PKCS7_verify() function can be triggered. This occurs if the SignedData digestAlgorithms field is present as an empty ASN.1 SET, leading to incorrect memory deallocation. A remote attacker could exploit this to cause application crashes, memory corruption, or potentially achieve remote code execution.
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
104 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in js-yaml, a JavaScript YAML parser and dumper. A remote attacker could exploit this vulnerability by providing a specially crafted YAML document containing a chain of mappings with merge keys. This could cause the parser to consume excessive CPU resources, leading to a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
104 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le | — |
Workaround
|
Threats
Impact
Important
References
135 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat multicluster engine for Kubernetes v2.8 general availability release images, which provide security fixes, bug fixes, and updated container images.\n\nRed Hat Product Security has rated this update as having a security impact of Critical.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The multicluster engine for Kubernetes provides the foundational components\nthat are necessary for the centralized management of multiple\nKubernetes-based clusters across data centers, public clouds, and private\nclouds.\n\nYou can use the engine to create new Red Hat OpenShift Container Platform\nclusters or to bring existing Kubernetes-based clusters under management by\nimporting them. After the clusters are managed, you can use the APIs that\nare provided by the engine to distribute configuration based on placement\npolicy.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:47735",
"url": "https://access.redhat.com/errata/RHSA-2026:47735"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-16242",
"url": "https://access.redhat.com/security/cve/CVE-2026-16242"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-17107",
"url": "https://access.redhat.com/security/cve/CVE-2026-17107"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25681",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27136",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27145",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-29181",
"url": "https://access.redhat.com/security/cve/CVE-2026-29181"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33811",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39828",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39829",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39830",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39835",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42508",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44740",
"url": "https://access.redhat.com/security/cve/CVE-2026-44740"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44990",
"url": "https://access.redhat.com/security/cve/CVE-2026-44990"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-45447",
"url": "https://access.redhat.com/security/cve/CVE-2026-45447"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-59869",
"url": "https://access.redhat.com/security/cve/CVE-2026-59869"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_47735.json"
}
],
"title": "Red Hat Security Advisory: multicluster engine for Kubernetes v2.8.9 security update",
"tracking": {
"current_release_date": "2026-08-26T04:26:27+00:00",
"generator": {
"date": "2026-08-26T04:26:27+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:47735",
"initial_release_date": "2026-07-29T07:36:44+00:00",
"revision_history": [
{
"date": "2026-07-29T07:36:44+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-22T06:15:42+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-26T04:26:27+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "multicluster engine for Kubernetes 2.8",
"product": {
"name": "multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:multicluster_engine:2.8::el9"
}
}
}
],
"category": "product_family",
"name": "multicluster engine for Kubernetes"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/managedcluster-import-controller-rhel9@sha256%3A7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9\u0026tag=1784298147"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/multicloud-manager-rhel9@sha256%3A0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/multicloud-manager-rhel9\u0026tag=1784504294"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/placement-rhel9@sha256%3A118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/placement-rhel9\u0026tag=1784332158"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/provider-credential-controller-rhel9@sha256%3Ac9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9\u0026tag=1784314752"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/registration-rhel9@sha256%3A30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/registration-rhel9\u0026tag=1784332168"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/registration-operator-rhel9@sha256%3Ab04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/registration-operator-rhel9\u0026tag=1784332167"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/work-rhel9@sha256%3Afcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/work-rhel9\u0026tag=1784136764"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/addon-manager-rhel9@sha256%3Ac6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/addon-manager-rhel9\u0026tag=1784314688"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/must-gather-rhel9@sha256%3A16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/must-gather-rhel9\u0026tag=1784590739"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/backplane-rhel9-operator@sha256%3A5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/backplane-rhel9-operator\u0026tag=1784737366"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/cluster-api-provider-agent-rhel9@sha256%3A304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9\u0026tag=1784300749"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/cluster-api-provider-kubevirt-rhel9@sha256%3A512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9\u0026tag=1784332083"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/cluster-curator-controller-rhel9@sha256%3A1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9\u0026tag=1784340121"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/cluster-image-set-controller-rhel9@sha256%3Af9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9\u0026tag=1784646786"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/cluster-proxy-addon-rhel9@sha256%3A72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9\u0026tag=1784926508"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/cluster-proxy-rhel9@sha256%3Ab4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-proxy-rhel9\u0026tag=1784342329"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/clusterclaims-controller-rhel9@sha256%3A4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9\u0026tag=1784332091"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/clusterlifecycle-state-metrics-rhel9@sha256%3Afc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9\u0026tag=1784341136"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/console-mce-rhel9@sha256%3A7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/console-mce-rhel9\u0026tag=1785078604"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/discovery-rhel9@sha256%3A369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/discovery-rhel9\u0026tag=1784306906"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/hive-rhel9@sha256%3A083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/hive-rhel9\u0026tag=1784896748"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-addon-rhel9-operator@sha256%3Af43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator\u0026tag=1784738758"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-cli-rhel9@sha256%3Ac5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/hypershift-cli-rhel9\u0026tag=1784905784"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-rhel9-operator@sha256%3A040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/hypershift-rhel9-operator\u0026tag=1784905783"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/image-based-install-rhel9@sha256%3Ab3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/image-based-install-rhel9\u0026tag=1784448763"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/kube-rbac-proxy-mce-rhel9@sha256%3A46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9\u0026tag=1784677239"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/managed-serviceaccount-rhel9@sha256%3A2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9\u0026tag=1784563084"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x",
"product_id": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x",
"product_identification_helper": {
"purl": "pkg:oci/managedcluster-import-controller-rhel9@sha256%3A9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9\u0026tag=1784298147"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x",
"product_id": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x",
"product_identification_helper": {
"purl": "pkg:oci/multicloud-manager-rhel9@sha256%3A6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/multicloud-manager-rhel9\u0026tag=1784504294"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x",
"product_id": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x",
"product_identification_helper": {
"purl": "pkg:oci/placement-rhel9@sha256%3Aa94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/placement-rhel9\u0026tag=1784332158"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x",
"product_id": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x",
"product_identification_helper": {
"purl": "pkg:oci/provider-credential-controller-rhel9@sha256%3A9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9\u0026tag=1784314752"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x",
"product_id": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x",
"product_identification_helper": {
"purl": "pkg:oci/registration-rhel9@sha256%3A7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/registration-rhel9\u0026tag=1784332168"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x",
"product_id": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x",
"product_identification_helper": {
"purl": "pkg:oci/registration-operator-rhel9@sha256%3A93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/registration-operator-rhel9\u0026tag=1784332167"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x",
"product_id": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x",
"product_identification_helper": {
"purl": "pkg:oci/work-rhel9@sha256%3Aaa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/work-rhel9\u0026tag=1784136764"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x",
"product_id": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x",
"product_identification_helper": {
"purl": "pkg:oci/addon-manager-rhel9@sha256%3A9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/addon-manager-rhel9\u0026tag=1784314688"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x",
"product_id": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x",
"product_identification_helper": {
"purl": "pkg:oci/must-gather-rhel9@sha256%3A1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/must-gather-rhel9\u0026tag=1784590739"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x",
"product_id": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x",
"product_identification_helper": {
"purl": "pkg:oci/backplane-rhel9-operator@sha256%3A9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/backplane-rhel9-operator\u0026tag=1784737366"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x",
"product_id": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x",
"product_identification_helper": {
"purl": "pkg:oci/cluster-api-provider-agent-rhel9@sha256%3A0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9\u0026tag=1784300749"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x",
"product_id": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x",
"product_identification_helper": {
"purl": "pkg:oci/cluster-api-provider-kubevirt-rhel9@sha256%3A45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9\u0026tag=1784332083"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x",
"product_id": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x",
"product_identification_helper": {
"purl": "pkg:oci/cluster-curator-controller-rhel9@sha256%3Abcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9\u0026tag=1784340121"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x",
"product_id": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x",
"product_identification_helper": {
"purl": "pkg:oci/cluster-image-set-controller-rhel9@sha256%3Ad882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9\u0026tag=1784646786"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x",
"product_id": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x",
"product_identification_helper": {
"purl": "pkg:oci/cluster-proxy-addon-rhel9@sha256%3Abf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9\u0026tag=1784926508"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x",
"product_id": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x",
"product_identification_helper": {
"purl": "pkg:oci/cluster-proxy-rhel9@sha256%3A99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-proxy-rhel9\u0026tag=1784342329"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x",
"product_id": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x",
"product_identification_helper": {
"purl": "pkg:oci/clusterclaims-controller-rhel9@sha256%3A3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9\u0026tag=1784332091"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x",
"product_id": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x",
"product_identification_helper": {
"purl": "pkg:oci/clusterlifecycle-state-metrics-rhel9@sha256%3A90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9\u0026tag=1784341136"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x",
"product_id": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x",
"product_identification_helper": {
"purl": "pkg:oci/console-mce-rhel9@sha256%3Ab3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/console-mce-rhel9\u0026tag=1785078604"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x",
"product_id": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x",
"product_identification_helper": {
"purl": "pkg:oci/discovery-rhel9@sha256%3Ac6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/discovery-rhel9\u0026tag=1784306906"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x",
"product_id": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x",
"product_identification_helper": {
"purl": "pkg:oci/hive-rhel9@sha256%3A22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/hive-rhel9\u0026tag=1784896748"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-addon-rhel9-operator@sha256%3A7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator\u0026tag=1784738758"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-cli-rhel9@sha256%3A0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/hypershift-cli-rhel9\u0026tag=1784905784"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-rhel9-operator@sha256%3A8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/hypershift-rhel9-operator\u0026tag=1784905783"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x",
"product_id": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x",
"product_identification_helper": {
"purl": "pkg:oci/image-based-install-rhel9@sha256%3A252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/image-based-install-rhel9\u0026tag=1784448763"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x",
"product_id": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x",
"product_identification_helper": {
"purl": "pkg:oci/kube-rbac-proxy-mce-rhel9@sha256%3Ac29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9\u0026tag=1784677239"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x",
"product_id": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x",
"product_identification_helper": {
"purl": "pkg:oci/managed-serviceaccount-rhel9@sha256%3A552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9\u0026tag=1784563084"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64",
"product_id": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64",
"product_identification_helper": {
"purl": "pkg:oci/multicloud-manager-rhel9@sha256%3Aca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/multicloud-manager-rhel9\u0026tag=1784504294"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64",
"product_id": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64",
"product_identification_helper": {
"purl": "pkg:oci/placement-rhel9@sha256%3A199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/placement-rhel9\u0026tag=1784332158"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64",
"product_id": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64",
"product_identification_helper": {
"purl": "pkg:oci/provider-credential-controller-rhel9@sha256%3A53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9\u0026tag=1784314752"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64",
"product_id": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64",
"product_identification_helper": {
"purl": "pkg:oci/registration-rhel9@sha256%3A81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/registration-rhel9\u0026tag=1784332168"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64",
"product_id": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/registration-operator-rhel9@sha256%3A874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/registration-operator-rhel9\u0026tag=1784332167"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64",
"product_id": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64",
"product_identification_helper": {
"purl": "pkg:oci/work-rhel9@sha256%3Abb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/work-rhel9\u0026tag=1784136764"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64",
"product_id": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64",
"product_identification_helper": {
"purl": "pkg:oci/addon-manager-rhel9@sha256%3A67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/addon-manager-rhel9\u0026tag=1784314688"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64",
"product_id": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64",
"product_identification_helper": {
"purl": "pkg:oci/must-gather-rhel9@sha256%3A96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/must-gather-rhel9\u0026tag=1784590739"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64",
"product_id": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64",
"product_identification_helper": {
"purl": "pkg:oci/backplane-rhel9-operator@sha256%3Af5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/backplane-rhel9-operator\u0026tag=1784737366"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-api-provider-agent-rhel9@sha256%3Adebf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9\u0026tag=1784300749"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-api-provider-kubevirt-rhel9@sha256%3Ac7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9\u0026tag=1784332083"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-curator-controller-rhel9@sha256%3A3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9\u0026tag=1784340121"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-image-set-controller-rhel9@sha256%3Aef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9\u0026tag=1784646786"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-proxy-addon-rhel9@sha256%3A6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9\u0026tag=1784926508"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-proxy-rhel9@sha256%3A43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-proxy-rhel9\u0026tag=1784342329"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64",
"product_id": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64",
"product_identification_helper": {
"purl": "pkg:oci/clusterclaims-controller-rhel9@sha256%3Ad44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9\u0026tag=1784332091"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64",
"product_id": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64",
"product_identification_helper": {
"purl": "pkg:oci/clusterlifecycle-state-metrics-rhel9@sha256%3A22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9\u0026tag=1784341136"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64",
"product_id": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64",
"product_identification_helper": {
"purl": "pkg:oci/console-mce-rhel9@sha256%3Aa73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/console-mce-rhel9\u0026tag=1785078604"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64",
"product_id": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64",
"product_identification_helper": {
"purl": "pkg:oci/discovery-rhel9@sha256%3A0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/discovery-rhel9\u0026tag=1784306906"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64",
"product_id": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64",
"product_identification_helper": {
"purl": "pkg:oci/hive-rhel9@sha256%3A19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/hive-rhel9\u0026tag=1784896748"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-addon-rhel9-operator@sha256%3A14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator\u0026tag=1784738758"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-cli-rhel9@sha256%3Af69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/hypershift-cli-rhel9\u0026tag=1784905784"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-rhel9-operator@sha256%3Afbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/hypershift-rhel9-operator\u0026tag=1784905783"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64",
"product_id": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64",
"product_identification_helper": {
"purl": "pkg:oci/image-based-install-rhel9@sha256%3A4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/image-based-install-rhel9\u0026tag=1784448763"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64",
"product_id": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64",
"product_identification_helper": {
"purl": "pkg:oci/kube-rbac-proxy-mce-rhel9@sha256%3A1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9\u0026tag=1784677239"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64",
"product_id": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64",
"product_identification_helper": {
"purl": "pkg:oci/managed-serviceaccount-rhel9@sha256%3A8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9\u0026tag=1784563084"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64",
"product_id": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64",
"product_identification_helper": {
"purl": "pkg:oci/managedcluster-import-controller-rhel9@sha256%3A6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9\u0026tag=1784298147"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64",
"product_id": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64",
"product_identification_helper": {
"purl": "pkg:oci/multicloud-manager-rhel9@sha256%3A736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/multicloud-manager-rhel9\u0026tag=1784504294"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64",
"product_id": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64",
"product_identification_helper": {
"purl": "pkg:oci/placement-rhel9@sha256%3A1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/placement-rhel9\u0026tag=1784332158"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64",
"product_id": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64",
"product_identification_helper": {
"purl": "pkg:oci/provider-credential-controller-rhel9@sha256%3Ac987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9\u0026tag=1784314752"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64",
"product_id": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64",
"product_identification_helper": {
"purl": "pkg:oci/registration-rhel9@sha256%3A857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/registration-rhel9\u0026tag=1784332168"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64",
"product_id": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64",
"product_identification_helper": {
"purl": "pkg:oci/registration-operator-rhel9@sha256%3A9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/registration-operator-rhel9\u0026tag=1784332167"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64",
"product_id": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64",
"product_identification_helper": {
"purl": "pkg:oci/work-rhel9@sha256%3A94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/work-rhel9\u0026tag=1784136764"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64",
"product_id": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64",
"product_identification_helper": {
"purl": "pkg:oci/addon-manager-rhel9@sha256%3A5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/addon-manager-rhel9\u0026tag=1784314688"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64",
"product_id": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64",
"product_identification_helper": {
"purl": "pkg:oci/must-gather-rhel9@sha256%3A94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/must-gather-rhel9\u0026tag=1784590739"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64",
"product_id": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64",
"product_identification_helper": {
"purl": "pkg:oci/backplane-rhel9-operator@sha256%3A4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/backplane-rhel9-operator\u0026tag=1784737366"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-api-provider-agent-rhel9@sha256%3Ad9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9\u0026tag=1784300749"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-api-provider-kubevirt-rhel9@sha256%3A7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9\u0026tag=1784332083"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-curator-controller-rhel9@sha256%3A1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9\u0026tag=1784340121"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-image-set-controller-rhel9@sha256%3A72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9\u0026tag=1784646786"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-proxy-addon-rhel9@sha256%3A2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9\u0026tag=1784926508"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-proxy-rhel9@sha256%3Ae76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-proxy-rhel9\u0026tag=1784342329"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64",
"product_id": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64",
"product_identification_helper": {
"purl": "pkg:oci/clusterclaims-controller-rhel9@sha256%3A08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9\u0026tag=1784332091"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64",
"product_id": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64",
"product_identification_helper": {
"purl": "pkg:oci/clusterlifecycle-state-metrics-rhel9@sha256%3A1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9\u0026tag=1784341136"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64",
"product_id": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64",
"product_identification_helper": {
"purl": "pkg:oci/console-mce-rhel9@sha256%3A8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/console-mce-rhel9\u0026tag=1785078604"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64",
"product_id": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64",
"product_identification_helper": {
"purl": "pkg:oci/discovery-rhel9@sha256%3A01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/discovery-rhel9\u0026tag=1784306906"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64",
"product_id": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64",
"product_identification_helper": {
"purl": "pkg:oci/hive-rhel9@sha256%3Ae6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/hive-rhel9\u0026tag=1784896748"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-addon-rhel9-operator@sha256%3Acd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator\u0026tag=1784738758"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-cli-rhel9@sha256%3Aa2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/hypershift-cli-rhel9\u0026tag=1784905784"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-rhel9-operator@sha256%3A6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/hypershift-rhel9-operator\u0026tag=1784905783"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64",
"product_id": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64",
"product_identification_helper": {
"purl": "pkg:oci/image-based-install-rhel9@sha256%3Aef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/image-based-install-rhel9\u0026tag=1784448763"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64",
"product_id": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64",
"product_identification_helper": {
"purl": "pkg:oci/kube-rbac-proxy-mce-rhel9@sha256%3A143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9\u0026tag=1784677239"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64",
"product_id": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64",
"product_identification_helper": {
"purl": "pkg:oci/managed-serviceaccount-rhel9@sha256%3A2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9\u0026tag=1784563084"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64",
"product_id": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64",
"product_identification_helper": {
"purl": "pkg:oci/managedcluster-import-controller-rhel9@sha256%3A612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9\u0026tag=1784298147"
}
}
}
],
"category": "architecture",
"name": "arm64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Microsoft Security Research (MSRC)"
],
"organization": "Microsoft"
}
],
"cve": "CVE-2026-16242",
"cwe": {
"id": "CWE-306",
"name": "Missing Authentication for Critical Function"
},
"discovery_date": "2026-07-20T04:50:48.621000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2502690"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Konnectivity proxy-server configuration for hosted control planes. The agent-facing listener was started without --cluster-ca-cert (and without token-based agent authentication), so client certificates were not validated. A remote attacker who can reach the Konnectivity cluster endpoint could connect as an unauthenticated agent, join the routing pool, and potentially proxy, inspect, modify, or drop control-plane-to-node traffic.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "hypershift: Konnectivity proxy-server accepts agent connections without validating client certificates",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw in the Konnectivity proxy-server used by hosted control planes allows a remote, unauthenticated attacker who can reach the agent-facing (cluster) endpoint to establish an agent connection without presenting a client certificate signed by the hosted cluster\u2019s Konnectivity CA, and without using token-based agent authentication. Because that endpoint is exposed so worker agents can connect, a successful attack can enroll an untrusted agent in the routing pool. When the proxy selects that stream for a control-plane dial, the attacker may proxy, inspect, modify, or drop control-plane-to-node traffic, affecting confidentiality, integrity, and availability of that path.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-16242"
},
{
"category": "external",
"summary": "RHBZ#2502690",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2502690"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-16242",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-16242"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-16242",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16242"
},
{
"category": "external",
"summary": "https://github.com/openshift/hypershift/pull/9031",
"url": "https://github.com/openshift/hypershift/pull/9031"
}
],
"release_date": "2026-07-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T07:36:44+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.13/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47735"
},
{
"category": "workaround",
"details": "Until an update that configures Konnectivity agent authentication is applied, restrict network access to the Konnectivity cluster (agent) endpoint so that only trusted worker networks can reach it. For NodePort or LoadBalancer publishing, limit ingress to port 8091 to worker node subnet ranges. For Route-based publishing, restrict access to the Konnectivity route to trusted networks where possible. These controls reduce the chance that an unauthenticated attacker can reach the agent listener; they do not replace proper agent client-certificate (or token) authentication.",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 9.4,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "hypershift: Konnectivity proxy-server accepts agent connections without validating client certificates"
},
{
"acknowledgments": [
{
"names": [
"Kahiro Okina"
],
"organization": "Craftsman Software, Inc."
},
{
"names": [
"Arpit Jain"
],
"organization": "GitHub: arpitjain099"
}
],
"cve": "CVE-2026-17107",
"cwe": {
"id": "CWE-441",
"name": "Unintended Proxy or Intermediary (\u0027Confused Deputy\u0027)"
},
"discovery_date": "2026-05-22T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2506771"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the cluster-proxy service-proxy component used in Red Hat Advanced Cluster Management for Kubernetes (RHACM) and multicluster-engine (MCE). The service-proxy appends impersonation group headers to proxied requests without first removing caller-supplied values, and the spoke ServiceAccount holds unrestricted impersonation permissions. An authenticated hub principal can inject an Impersonate-Group header to escalate to cluster-admin on every managed cluster.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "cluster-proxy: cluster-proxy: Impersonation header injection in service-proxy grants cluster-admin on every managed cluster",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in the cluster-proxy service-proxy component of Red Hat Advanced Cluster Management for Kubernetes and multicluster-engine that allows an authenticated hub principal to escalate privileges to cluster-admin across all managed clusters. This is due to improper handling of impersonation group headers, enabling unauthorized administrative access. While the impact of successful exploitation is severe, the attack requires authenticated access to the ACM hub cluster, which is a management-plane component not typically exposed to untrusted networks. Exploitation also depends on knowledge of the cluster-proxy architecture and deliberate construction of requests targeting specific managed clusters. These prerequisites significantly reduce the likelihood of opportunistic or widespread exploitation.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-17107"
},
{
"category": "external",
"summary": "RHBZ#2506771",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2506771"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-17107",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-17107"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-17107",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-17107"
}
],
"release_date": "2026-07-24T18:49:48.386000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T07:36:44+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.13/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47735"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "cluster-proxy: cluster-proxy: Impersonation header injection in service-proxy grants cluster-admin on every managed cluster"
},
{
"cve": "CVE-2026-25681",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:01:08.177603+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480761"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/net/html` could enable remote attackers to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution. The flaw allows specially crafted HTML to bypass input sanitization during parsing and rendering. Red Hat products are affected if they process untrusted HTML content using the vulnerable component without additional output encoding or robust content security policies.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "RHBZ#2480761",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480761"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25681",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25681"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://go.dev/cl/781703",
"url": "https://go.dev/cl/781703"
},
{
"category": "external",
"summary": "https://go.dev/issue/79574",
"url": "https://go.dev/issue/79574"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5029",
"url": "https://pkg.go.dev/vuln/GO-2026-5029"
}
],
"release_date": "2026-05-22T15:01:21.975000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T07:36:44+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.13/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47735"
},
{
"category": "workaround",
"details": "To mitigate this flaw, applications processing untrusted HTML input must implement strict input sanitization and ensure all output is properly encoded before rendering. Deploying a comprehensive Content Security Policy (CSP) can restrict script execution, further reducing the attack surface. Administrators should review application configurations to ensure adequate protection against XSS.",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting"
},
{
"cve": "CVE-2026-27136",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:00:56.609820+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480757"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in `golang.org/x/net/html` is rated as Important. It allows for Cross-Site Scripting (XSS) attacks by enabling an attacker to bypass HTML sanitization mechanisms when arbitrary HTML is parsed and rendered. This can lead to information disclosure or arbitrary code execution in affected applications. Exploitation typically requires user interaction, where a user processes specially crafted malicious HTML content.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "RHBZ#2480757",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480757"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27136",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27136"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://go.dev/cl/781685",
"url": "https://go.dev/cl/781685"
},
{
"category": "external",
"summary": "https://go.dev/issue/79575",
"url": "https://go.dev/issue/79575"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5030",
"url": "https://pkg.go.dev/vuln/GO-2026-5030"
}
],
"release_date": "2026-05-22T15:01:22.111000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T07:36:44+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.13/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47735"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass"
},
{
"cve": "CVE-2026-27145",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-06-02T23:01:08.992540+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484207"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "RHBZ#2484207",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27145",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27145"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://go.dev/cl/783621",
"url": "https://go.dev/cl/783621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79694",
"url": "https://go.dev/issue/79694"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5037",
"url": "https://pkg.go.dev/vuln/GO-2026-5037"
}
],
"release_date": "2026-06-02T22:01:36.954000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T07:36:44+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.13/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47735"
},
{
"category": "workaround",
"details": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries"
},
{
"cve": "CVE-2026-29181",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-04-07T21:01:21.484468+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456252"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenTelemetry-Go, the Go implementation of OpenTelemetry. A remote attacker can exploit this vulnerability by sending multiple \u0027baggage\u0027 header lines. The system\u0027s independent parsing and aggregation of each header field-value across multiple values can lead to amplified CPU and memory allocations, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/open-telemetry/opentelemetry-go: OpenTelemetry-Go: Denial of Service via crafted multi-value baggage headers",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in OpenTelemetry-Go, affecting Red Hat Multicluster Engine for Kubernetes. A remote attacker can exploit this flaw by sending multiple crafted `baggage` HTTP header lines, leading to excessive CPU and memory consumption and potentially rendering services unavailable. This impact is significant due to the potential for widespread disruption in a multi-cluster environment.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-29181"
},
{
"category": "external",
"summary": "RHBZ#2456252",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456252"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-29181",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-29181"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-29181",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-29181"
},
{
"category": "external",
"summary": "https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-mh2q-q3fh-2475",
"url": "https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-mh2q-q3fh-2475"
}
],
"release_date": "2026-04-07T20:29:13.933000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T07:36:44+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.13/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47735"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/open-telemetry/opentelemetry-go: OpenTelemetry-Go: Denial of Service via crafted multi-value baggage headers"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T07:36:44+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.13/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47735"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T07:36:44+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.13/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47735"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-39828",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:46.775641+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480687"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important security flaw in the `golang.org/x/crypto/ssh` library. When an SSH server utilizing this library is configured with specific authentication callbacks that return a `PartialSuccessError` with non-nil permissions, an attacker could bypass intended certificate restrictions, such as `force-command`. This bypass could lead to unauthorized command execution or access on affected Red Hat systems configured with multi-factor authentication and certificate-based access controls.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "RHBZ#2480687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480687"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39828",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39828"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://go.dev/cl/781621",
"url": "https://go.dev/cl/781621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79562",
"url": "https://go.dev/issue/79562"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5014",
"url": "https://pkg.go.dev/vuln/GO-2026-5014"
}
],
"release_date": "2026-05-22T02:31:26.883000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T07:36:44+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.13/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47735"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions"
},
{
"cve": "CVE-2026-39829",
"cwe": {
"id": "CWE-1284",
"name": "Improper Validation of Specified Quantity in Input"
},
"discovery_date": "2026-05-22T04:01:30.092249+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480681"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in golang.org/x/crypto/ssh is rated as Important. An unauthenticated remote attacker could trigger a denial of service by providing a specially crafted public key with excessively large parameters during SSH public key authentication. This could lead to prolonged CPU consumption on the server, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "RHBZ#2480681",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480681"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39829",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39829"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://go.dev/cl/781641",
"url": "https://go.dev/cl/781641"
},
{
"category": "external",
"summary": "https://go.dev/cl/781661",
"url": "https://go.dev/cl/781661"
},
{
"category": "external",
"summary": "https://go.dev/issue/79565",
"url": "https://go.dev/issue/79565"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5018",
"url": "https://pkg.go.dev/vuln/GO-2026-5018"
}
],
"release_date": "2026-05-22T02:31:27.324000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T07:36:44+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.13/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47735"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters"
},
{
"cve": "CVE-2026-39830",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2026-05-22T04:01:38.517202+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection\u0027s read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh`. A remote, unauthenticated attacker can exploit this vulnerability by sending unsolicited global request responses to an affected SSH server, leading to resource exhaustion and a denial of service. The impact is considered Important due to the potential for unauthenticated remote disruption of services utilizing the vulnerable SSH library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "RHBZ#2480684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39830",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39830"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://go.dev/cl/781640",
"url": "https://go.dev/cl/781640"
},
{
"category": "external",
"summary": "https://go.dev/cl/781664",
"url": "https://go.dev/cl/781664"
},
{
"category": "external",
"summary": "https://go.dev/issue/79564",
"url": "https://go.dev/issue/79564"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5017",
"url": "https://pkg.go.dev/vuln/GO-2026-5017"
}
],
"release_date": "2026-05-22T02:31:27.208000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T07:36:44+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.13/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47735"
},
{
"category": "workaround",
"details": "To mitigate this denial of service vulnerability, restrict network access to any service that utilizes the `golang.org/x/crypto/ssh` library and is exposed to untrusted networks. Implement firewall rules to allow connections only from trusted hosts or networks. This action limits the ability of malicious peers to send unsolicited global request responses. A restart of the affected service may be necessary for the new network rules to be applied effectively.",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses"
},
{
"cve": "CVE-2026-39835",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-05-22T04:01:27.279943+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480680"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh` affecting SSH servers that utilize `CertChecker` as a public key callback without explicitly configuring `IsUserAuthority` or `IsHostAuthority`. A remote, unauthenticated attacker can trigger a server panic by presenting a specially crafted certificate, leading to service disruption. Exploitation requires a specific, non-default configuration of the `CertChecker`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "RHBZ#2480680",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480680"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39835",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39835"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://go.dev/cl/781660",
"url": "https://go.dev/cl/781660"
},
{
"category": "external",
"summary": "https://go.dev/issue/79563",
"url": "https://go.dev/issue/79563"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5015",
"url": "https://pkg.go.dev/vuln/GO-2026-5015"
}
],
"release_date": "2026-05-22T02:31:26.982000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T07:36:44+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.13/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47735"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate"
},
{
"cve": "CVE-2026-42508",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-05-22T04:01:49.515058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480688"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in `golang.org/x/crypto/ssh/knownhosts` allows a remote attacker to bypass security checks. This vulnerability arises because the system fails to properly verify the revocation status of a Certificate Authority (CA) `SignatureKey`. In Red Hat environments, this could enable an attacker to present a revoked key, leading to its acceptance as valid and potentially granting unauthorized access or facilitating the spoofing of legitimate entities.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "RHBZ#2480688",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480688"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42508",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42508"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://go.dev/cl/781220",
"url": "https://go.dev/cl/781220"
},
{
"category": "external",
"summary": "https://go.dev/issue/79568",
"url": "https://go.dev/issue/79568"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5021",
"url": "https://pkg.go.dev/vuln/GO-2026-5021"
}
],
"release_date": "2026-05-22T02:31:27.644000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T07:36:44+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.13/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47735"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey"
},
{
"cve": "CVE-2026-44740",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-06-01T17:01:53.685793+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2483894"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Billy, an interface filesystem abstraction for Go. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by providing crafted or malformed input. The issue arises from insufficient validation and missing safety mechanisms when processing untrusted repository data and filesystem structures, leading to panics, infinite loops, uncontrolled recursion, or excessive resource consumption.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/go-git/go-billy: Billy: Denial of Service via crafted input due to insufficient validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is rated as an Important severity issue. The `go-billy` library, a Go filesystem abstraction, is vulnerable to a denial of service when processing crafted or malformed input, such as untrusted repository data or filesystem structures. Insufficient validation and missing safety mechanisms can lead to panics, infinite loops, or excessive resource consumption, potentially impacting the availability of applications that rely on this library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44740"
},
{
"category": "external",
"summary": "RHBZ#2483894",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2483894"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44740",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44740"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44740",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44740"
},
{
"category": "external",
"summary": "https://github.com/go-git/go-billy/releases/tag/v5.9.0",
"url": "https://github.com/go-git/go-billy/releases/tag/v5.9.0"
},
{
"category": "external",
"summary": "https://github.com/go-git/go-billy/releases/tag/v6.0.0-alpha.1",
"url": "https://github.com/go-git/go-billy/releases/tag/v6.0.0-alpha.1"
},
{
"category": "external",
"summary": "https://github.com/go-git/go-billy/security/advisories/GHSA-m3xc-h892-ggx6",
"url": "https://github.com/go-git/go-billy/security/advisories/GHSA-m3xc-h892-ggx6"
}
],
"release_date": "2026-06-01T16:04:50.358000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T07:36:44+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.13/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47735"
},
{
"category": "workaround",
"details": "To mitigate the issue, we suggest upgrading to versions 5.9.0+ or 6.0.0-alpha.1+",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/go-git/go-billy: Billy: Denial of Service via crafted input due to insufficient validation"
},
{
"cve": "CVE-2026-44990",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-06-12T21:02:24.911971+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488565"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `sanitize-html` library. Under its default configuration, an attacker can embed malicious content within a disallowed `xmp` element. This vulnerability allows the attacker to bypass the HTML sanitization process, leading to stored Cross-Site Scripting (XSS). Successful exploitation can result in arbitrary code execution or information disclosure when a user views the affected content.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "sanitize-html: `sanitize-html`: Stored Cross-Site Scripting via HTML sanitizer bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw. The `sanitize-html` library, used in Red Hat products, is susceptible to a stored Cross-Site Scripting (XSS) bypass. Malicious content within a disallowed `xmp` element can be rendered as live HTML or JavaScript due to a sanitizer bypass in the default configuration. This can lead to arbitrary code execution or information disclosure when affected content is viewed.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44990"
},
{
"category": "external",
"summary": "RHBZ#2488565",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488565"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44990",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44990"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44990",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44990"
},
{
"category": "external",
"summary": "https://github.com/apostrophecms/apostrophe/security/advisories/GHSA-rpr9-rxv7-x643",
"url": "https://github.com/apostrophecms/apostrophe/security/advisories/GHSA-rpr9-rxv7-x643"
}
],
"release_date": "2026-06-12T20:39:47.065000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T07:36:44+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.13/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47735"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "sanitize-html: `sanitize-html`: Stored Cross-Site Scripting via HTML sanitizer bypass"
},
{
"cve": "CVE-2026-45447",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2026-05-27T14:17:46+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2481898"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenSSL. When processing a specially crafted PKCS#7 or S/MIME (Secure/Multipurpose Internet Mail Extensions) signed message, a heap use-after-free vulnerability in the PKCS7_verify() function can be triggered. This occurs if the SignedData digestAlgorithms field is present as an empty ASN.1 SET, leading to incorrect memory deallocation. A remote attacker could exploit this to cause application crashes, memory corruption, or potentially achieve remote code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This High severity heap use-after-free flaw in OpenSSL\u0027s PKCS7_verify() function can be triggered by processing a specially crafted PKCS#7 or S/MIME signed message. This could lead to application crashes, memory corruption, or potentially remote code execution, impacting services that handle such messages. The vulnerability specifically affects applications utilizing OpenSSL PKCS#7 APIs, while those using CMS APIs are not impacted.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45447"
},
{
"category": "external",
"summary": "RHBZ#2481898",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481898"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45447",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45447"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45447",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45447"
}
],
"release_date": "2026-06-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T07:36:44+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.13/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47735"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()"
},
{
"cve": "CVE-2026-59869",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-07-08T16:01:38.408322+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2498122"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in js-yaml, a JavaScript YAML parser and dumper. A remote attacker could exploit this vulnerability by providing a specially crafted YAML document containing a chain of mappings with merge keys. This could cause the parser to consume excessive CPU resources, leading to a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "js-yaml: js-yaml: Denial of Service via crafted YAML documents",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as Important. Red Hat products utilizing `js-yaml` to process untrusted YAML input are susceptible to a denial of service, as a remote attacker can provide a crafted document that consumes excessive CPU resources. This is considered Important due to the potential for service disruption without requiring authentication or complex attack vectors.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-59869"
},
{
"category": "external",
"summary": "RHBZ#2498122",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498122"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-59869",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-59869"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59869",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59869"
},
{
"category": "external",
"summary": "https://github.com/nodeca/js-yaml/commit/24f13e79ee1343a7e30bd6f6c9d9cdbf0ac9b2b7",
"url": "https://github.com/nodeca/js-yaml/commit/24f13e79ee1343a7e30bd6f6c9d9cdbf0ac9b2b7"
},
{
"category": "external",
"summary": "https://github.com/nodeca/js-yaml/commit/59423c6f8cdc78742ac00e25a4dd39ef16b702e4",
"url": "https://github.com/nodeca/js-yaml/commit/59423c6f8cdc78742ac00e25a4dd39ef16b702e4"
},
{
"category": "external",
"summary": "https://github.com/nodeca/js-yaml/releases/tag/3.15.0",
"url": "https://github.com/nodeca/js-yaml/releases/tag/3.15.0"
},
{
"category": "external",
"summary": "https://github.com/nodeca/js-yaml/releases/tag/4.3.0",
"url": "https://github.com/nodeca/js-yaml/releases/tag/4.3.0"
},
{
"category": "external",
"summary": "https://github.com/nodeca/js-yaml/security/advisories/GHSA-52cp-r559-cp3m",
"url": "https://github.com/nodeca/js-yaml/security/advisories/GHSA-52cp-r559-cp3m"
}
],
"release_date": "2026-07-08T15:15:54.675000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T07:36:44+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.13/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47735"
},
{
"category": "workaround",
"details": "To reduce exposure, restrict the processing of untrusted YAML documents by applications that rely on `js-yaml`. Implement robust input validation and sanitization for all YAML data originating from external or untrusted sources. Consider limiting network access to services that parse YAML content to trusted networks or clients through appropriate firewall configurations.",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "js-yaml: js-yaml: Denial of Service via crafted YAML documents"
}
]
}
RHSA-2026:47952
Vulnerability from csaf_redhat - Published: 2026-07-29 14:47 - Updated: 2026-08-26 04:27Summary
Red Hat Security Advisory: Logging for Red Hat OpenShift - 6.2.12
Severity
Important
Notes
Topic: Logging for Red Hat OpenShift - 6.2.12
Details: Red Hat OpenShift Logging 6.2.12 is a cluster-wide logging solution for OpenShift that collects and manages applications, infrastructure, and audit logs.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
30 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
30 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64 | — |
Vendor Fix
fix
|
Known not affected
30 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64 | — |
Threats
Impact
Important
A flaw was found in Go's `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.
5.9 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
30 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.
7.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
30 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.
9.1 (Critical)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
26 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.
8.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64 | — |
Vendor Fix
fix
|
Known not affected
30 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64 | — |
Threats
Impact
Important
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
30 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
30 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
30 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
30 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.
7.5 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64 | — |
Vendor Fix
fix
|
Known not affected
22 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64 | — |
Threats
Impact
Important
A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.
7.5 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
22 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
30 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the Golang MIME (Multipurpose Internet Mail Extensions) package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
30 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64 | — |
Workaround
|
Threats
Impact
Important
References
126 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Logging for Red Hat OpenShift - 6.2.12",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat OpenShift Logging 6.2.12 is a cluster-wide logging solution for OpenShift that collects and manages applications, infrastructure, and audit logs.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:47952",
"url": "https://access.redhat.com/errata/RHSA-2026:47952"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25681",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27136",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32280",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32281",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32282",
"url": "https://access.redhat.com/security/cve/CVE-2026-32282"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33186",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33810",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33811",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-34986",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39820",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42151",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42154",
"url": "https://access.redhat.com/security/cve/CVE-2026-42154"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42499",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42504",
"url": "https://access.redhat.com/security/cve/CVE-2026-42504"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_47952.json"
}
],
"title": "Red Hat Security Advisory: Logging for Red Hat OpenShift - 6.2.12",
"tracking": {
"current_release_date": "2026-08-26T04:27:28+00:00",
"generator": {
"date": "2026-08-26T04:27:28+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:47952",
"initial_release_date": "2026-07-29T14:47:37+00:00",
"revision_history": [
{
"date": "2026-07-29T14:47:37+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-22T06:15:42+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-26T04:27:28+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Logging for Red Hat OpenShift 6.2",
"product": {
"name": "Logging for Red Hat OpenShift 6.2",
"product_id": "Logging for Red Hat OpenShift 6.2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:logging:6.2::el9"
}
}
}
],
"category": "product_family",
"name": "Logging for Red Hat OpenShift"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"product": {
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"product_id": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-logging-rhel9-operator@sha256%3A9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator\u0026tag=1784833274"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"product": {
"name": "registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"product_id": "registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-logging-operator-bundle@sha256%3A47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/cluster-logging-operator-bundle\u0026tag=1784836825"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"product": {
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"product_id": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"product_identification_helper": {
"purl": "pkg:oci/eventrouter-rhel9@sha256%3A1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/eventrouter-rhel9\u0026tag=1784747813"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"product": {
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"product_id": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"product_identification_helper": {
"purl": "pkg:oci/log-file-metric-exporter-rhel9@sha256%3A7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9\u0026tag=1784747805"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"product": {
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"product_id": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"product_identification_helper": {
"purl": "pkg:oci/logging-loki-rhel9@sha256%3Aa80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/logging-loki-rhel9\u0026tag=1784748010"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"product": {
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"product_id": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"product_identification_helper": {
"purl": "pkg:oci/loki-rhel9-operator@sha256%3Ae2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/loki-rhel9-operator\u0026tag=1784747884"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"product": {
"name": "registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"product_id": "registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"product_identification_helper": {
"purl": "pkg:oci/loki-operator-bundle@sha256%3A99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/loki-operator-bundle\u0026tag=1784751438"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"product": {
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"product_id": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"product_identification_helper": {
"purl": "pkg:oci/lokistack-gateway-rhel9@sha256%3Aae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/lokistack-gateway-rhel9\u0026tag=1784747816"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"product": {
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"product_id": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"product_identification_helper": {
"purl": "pkg:oci/opa-openshift-rhel9@sha256%3Ac89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/opa-openshift-rhel9\u0026tag=1784747815"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64",
"product": {
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64",
"product_id": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64",
"product_identification_helper": {
"purl": "pkg:oci/vector-rhel9@sha256%3A8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/vector-rhel9\u0026tag=1784833657"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"product": {
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"product_id": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-logging-rhel9-operator@sha256%3A100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator\u0026tag=1784833274"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"product": {
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"product_id": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"product_identification_helper": {
"purl": "pkg:oci/eventrouter-rhel9@sha256%3A666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/eventrouter-rhel9\u0026tag=1784747813"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"product": {
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"product_id": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"product_identification_helper": {
"purl": "pkg:oci/log-file-metric-exporter-rhel9@sha256%3A9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9\u0026tag=1784747805"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"product": {
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"product_id": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"product_identification_helper": {
"purl": "pkg:oci/logging-loki-rhel9@sha256%3A1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/logging-loki-rhel9\u0026tag=1784748010"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"product": {
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"product_id": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"product_identification_helper": {
"purl": "pkg:oci/loki-rhel9-operator@sha256%3A6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/loki-rhel9-operator\u0026tag=1784747884"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"product": {
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"product_id": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"product_identification_helper": {
"purl": "pkg:oci/lokistack-gateway-rhel9@sha256%3Ab81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/lokistack-gateway-rhel9\u0026tag=1784747816"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"product": {
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"product_id": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"product_identification_helper": {
"purl": "pkg:oci/opa-openshift-rhel9@sha256%3A134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/opa-openshift-rhel9\u0026tag=1784747815"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"product": {
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"product_id": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"product_identification_helper": {
"purl": "pkg:oci/vector-rhel9@sha256%3A3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/vector-rhel9\u0026tag=1784833657"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"product": {
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"product_id": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"product_identification_helper": {
"purl": "pkg:oci/cluster-logging-rhel9-operator@sha256%3A802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator\u0026tag=1784833274"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"product": {
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"product_id": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"product_identification_helper": {
"purl": "pkg:oci/eventrouter-rhel9@sha256%3A153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/eventrouter-rhel9\u0026tag=1784747813"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"product": {
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"product_id": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"product_identification_helper": {
"purl": "pkg:oci/log-file-metric-exporter-rhel9@sha256%3Acc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9\u0026tag=1784747805"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"product": {
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"product_id": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"product_identification_helper": {
"purl": "pkg:oci/logging-loki-rhel9@sha256%3A9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/logging-loki-rhel9\u0026tag=1784748010"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"product": {
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"product_id": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"product_identification_helper": {
"purl": "pkg:oci/loki-rhel9-operator@sha256%3A161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/loki-rhel9-operator\u0026tag=1784747884"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"product": {
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"product_id": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"product_identification_helper": {
"purl": "pkg:oci/lokistack-gateway-rhel9@sha256%3A6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/lokistack-gateway-rhel9\u0026tag=1784747816"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"product": {
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"product_id": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"product_identification_helper": {
"purl": "pkg:oci/opa-openshift-rhel9@sha256%3A22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/opa-openshift-rhel9\u0026tag=1784747815"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"product": {
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"product_id": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"product_identification_helper": {
"purl": "pkg:oci/vector-rhel9@sha256%3A7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/vector-rhel9\u0026tag=1784833657"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"product_id": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/cluster-logging-rhel9-operator@sha256%3A0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator\u0026tag=1784833274"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"product_id": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/eventrouter-rhel9@sha256%3A4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/eventrouter-rhel9\u0026tag=1784747813"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"product_id": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/log-file-metric-exporter-rhel9@sha256%3A99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9\u0026tag=1784747805"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"product_id": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/logging-loki-rhel9@sha256%3A65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/logging-loki-rhel9\u0026tag=1784748010"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"product_id": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/loki-rhel9-operator@sha256%3A8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/loki-rhel9-operator\u0026tag=1784747884"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"product_id": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/lokistack-gateway-rhel9@sha256%3A3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/lokistack-gateway-rhel9\u0026tag=1784747816"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"product_id": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/opa-openshift-rhel9@sha256%3A6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/opa-openshift-rhel9\u0026tag=1784747815"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"product_id": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/vector-rhel9@sha256%3A80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/vector-rhel9\u0026tag=1784833657"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64 as a component of Logging for Red Hat OpenShift 6.2",
"product_id": "Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64"
},
"product_reference": "registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le as a component of Logging for Red Hat OpenShift 6.2",
"product_id": "Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64 as a component of Logging for Red Hat OpenShift 6.2",
"product_id": "Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64"
},
"product_reference": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x as a component of Logging for Red Hat OpenShift 6.2",
"product_id": "Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x"
},
"product_reference": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64 as a component of Logging for Red Hat OpenShift 6.2",
"product_id": "Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64"
},
"product_reference": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x as a component of Logging for Red Hat OpenShift 6.2",
"product_id": "Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x"
},
"product_reference": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64 as a component of Logging for Red Hat OpenShift 6.2",
"product_id": "Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64"
},
"product_reference": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le as a component of Logging for Red Hat OpenShift 6.2",
"product_id": "Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64 as a component of Logging for Red Hat OpenShift 6.2",
"product_id": "Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64"
},
"product_reference": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64 as a component of Logging for Red Hat OpenShift 6.2",
"product_id": "Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64"
},
"product_reference": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le as a component of Logging for Red Hat OpenShift 6.2",
"product_id": "Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64 as a component of Logging for Red Hat OpenShift 6.2",
"product_id": "Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64"
},
"product_reference": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x as a component of Logging for Red Hat OpenShift 6.2",
"product_id": "Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x"
},
"product_reference": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64 as a component of Logging for Red Hat OpenShift 6.2",
"product_id": "Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64"
},
"product_reference": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le as a component of Logging for Red Hat OpenShift 6.2",
"product_id": "Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x as a component of Logging for Red Hat OpenShift 6.2",
"product_id": "Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x"
},
"product_reference": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64 as a component of Logging for Red Hat OpenShift 6.2",
"product_id": "Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64"
},
"product_reference": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64 as a component of Logging for Red Hat OpenShift 6.2",
"product_id": "Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64"
},
"product_reference": "registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x as a component of Logging for Red Hat OpenShift 6.2",
"product_id": "Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x"
},
"product_reference": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64 as a component of Logging for Red Hat OpenShift 6.2",
"product_id": "Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64"
},
"product_reference": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le as a component of Logging for Red Hat OpenShift 6.2",
"product_id": "Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64 as a component of Logging for Red Hat OpenShift 6.2",
"product_id": "Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64"
},
"product_reference": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le as a component of Logging for Red Hat OpenShift 6.2",
"product_id": "Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x as a component of Logging for Red Hat OpenShift 6.2",
"product_id": "Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x"
},
"product_reference": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64 as a component of Logging for Red Hat OpenShift 6.2",
"product_id": "Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64"
},
"product_reference": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64 as a component of Logging for Red Hat OpenShift 6.2",
"product_id": "Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64"
},
"product_reference": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64 as a component of Logging for Red Hat OpenShift 6.2",
"product_id": "Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64"
},
"product_reference": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x as a component of Logging for Red Hat OpenShift 6.2",
"product_id": "Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x"
},
"product_reference": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le as a component of Logging for Red Hat OpenShift 6.2",
"product_id": "Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64 as a component of Logging for Red Hat OpenShift 6.2",
"product_id": "Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64"
},
"product_reference": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64 as a component of Logging for Red Hat OpenShift 6.2",
"product_id": "Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64"
},
"product_reference": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x as a component of Logging for Red Hat OpenShift 6.2",
"product_id": "Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x"
},
"product_reference": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le as a component of Logging for Red Hat OpenShift 6.2",
"product_id": "Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64 as a component of Logging for Red Hat OpenShift 6.2",
"product_id": "Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
},
"product_reference": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.2"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-25681",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:01:08.177603+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480761"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/net/html` could enable remote attackers to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution. The flaw allows specially crafted HTML to bypass input sanitization during parsing and rendering. Red Hat products are affected if they process untrusted HTML content using the vulnerable component without additional output encoding or robust content security policies.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64"
],
"known_not_affected": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "RHBZ#2480761",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480761"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25681",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25681"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://go.dev/cl/781703",
"url": "https://go.dev/cl/781703"
},
{
"category": "external",
"summary": "https://go.dev/issue/79574",
"url": "https://go.dev/issue/79574"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5029",
"url": "https://pkg.go.dev/vuln/GO-2026-5029"
}
],
"release_date": "2026-05-22T15:01:21.975000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T14:47:37+00:00",
"details": "For OpenShift Container Platform 4.18 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/ocp-4-18-release-notes\n\nFor Red Hat OpenShift Logging 6.2, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.2",
"product_ids": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47952"
},
{
"category": "workaround",
"details": "To mitigate this flaw, applications processing untrusted HTML input must implement strict input sanitization and ensure all output is properly encoded before rendering. Deploying a comprehensive Content Security Policy (CSP) can restrict script execution, further reducing the attack surface. Administrators should review application configurations to ensure adequate protection against XSS.",
"product_ids": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting"
},
{
"cve": "CVE-2026-27136",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:00:56.609820+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480757"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in `golang.org/x/net/html` is rated as Important. It allows for Cross-Site Scripting (XSS) attacks by enabling an attacker to bypass HTML sanitization mechanisms when arbitrary HTML is parsed and rendered. This can lead to information disclosure or arbitrary code execution in affected applications. Exploitation typically requires user interaction, where a user processes specially crafted malicious HTML content.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64"
],
"known_not_affected": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "RHBZ#2480757",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480757"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27136",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27136"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://go.dev/cl/781685",
"url": "https://go.dev/cl/781685"
},
{
"category": "external",
"summary": "https://go.dev/issue/79575",
"url": "https://go.dev/issue/79575"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5030",
"url": "https://pkg.go.dev/vuln/GO-2026-5030"
}
],
"release_date": "2026-05-22T15:01:22.111000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T14:47:37+00:00",
"details": "For OpenShift Container Platform 4.18 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/ocp-4-18-release-notes\n\nFor Red Hat OpenShift Logging 6.2, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.2",
"product_ids": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47952"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass"
},
{
"cve": "CVE-2026-32280",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-04-08T02:01:19.572351+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456339"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go standard library\u0027s certificate chain building process. Systems utilizing Go applications that process untrusted TLS certificates or X.509 certificate chains are susceptible to resource exhaustion when presented with an excessive number of intermediate certificates, potentially leading to service unavailability. This flaw impacts applications directly using `crypto/x509` or `crypto/tls`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64"
],
"known_not_affected": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "RHBZ#2456339",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456339"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32280",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32280"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://go.dev/cl/758320",
"url": "https://go.dev/cl/758320"
},
{
"category": "external",
"summary": "https://go.dev/issue/78282",
"url": "https://go.dev/issue/78282"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4947",
"url": "https://pkg.go.dev/vuln/GO-2026-4947"
}
],
"release_date": "2026-04-08T01:06:58.595000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T14:47:37+00:00",
"details": "For OpenShift Container Platform 4.18 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/ocp-4-18-release-notes\n\nFor Red Hat OpenShift Logging 6.2, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.2",
"product_ids": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47952"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building"
},
{
"cve": "CVE-2026-32281",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-04-08T02:01:00.930989+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456333"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go\u0027s `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw occurs during the validation of otherwise trusted certificate chains that contain a large number of policy mappings, leading to excessive resource consumption. Exploitation requires an attacker to present a specially crafted, yet trusted, certificate chain which would require the attacker has already compromised a trusted certificate root. Red Hat continuously monitors certificate authorities and curates the set which is trusted by default for Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64"
],
"known_not_affected": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "RHBZ#2456333",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456333"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32281",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32281"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://go.dev/cl/758061",
"url": "https://go.dev/cl/758061"
},
{
"category": "external",
"summary": "https://go.dev/issue/78281",
"url": "https://go.dev/issue/78281"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4946",
"url": "https://pkg.go.dev/vuln/GO-2026-4946"
}
],
"release_date": "2026-04-08T01:06:58.354000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T14:47:37+00:00",
"details": "For OpenShift Container Platform 4.18 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/ocp-4-18-release-notes\n\nFor Red Hat OpenShift Logging 6.2, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.2",
"product_ids": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47952"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation"
},
{
"cve": "CVE-2026-32282",
"cwe": {
"id": "CWE-367",
"name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
},
"discovery_date": "2026-04-08T02:01:12.683211+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456336"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs access to the system and the required permissions to create a symbolic link. Additionally, the attacker must swap the target file with a symbolic link in the exact window after the `Root.Chmod` function checks its target but before acting. Due to these conditions, this flaw has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64"
],
"known_not_affected": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32282"
},
{
"category": "external",
"summary": "RHBZ#2456336",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456336"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32282",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32282"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282"
},
{
"category": "external",
"summary": "https://go.dev/cl/763761",
"url": "https://go.dev/cl/763761"
},
{
"category": "external",
"summary": "https://go.dev/issue/78293",
"url": "https://go.dev/issue/78293"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4864",
"url": "https://pkg.go.dev/vuln/GO-2026-4864"
}
],
"release_date": "2026-04-08T01:06:55.953000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T14:47:37+00:00",
"details": "For OpenShift Container Platform 4.18 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/ocp-4-18-release-notes\n\nFor Red Hat OpenShift Logging 6.2, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.2",
"product_ids": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47952"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root"
},
{
"cve": "CVE-2026-33186",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-03-20T23:02:27.802640+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449833"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64"
],
"known_not_affected": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "RHBZ#2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
}
],
"release_date": "2026-03-20T22:23:32.147000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T14:47:37+00:00",
"details": "For OpenShift Container Platform 4.18 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/ocp-4-18-release-notes\n\nFor Red Hat OpenShift Logging 6.2, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.2",
"product_ids": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47952"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
"product_ids": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
},
{
"cve": "CVE-2026-33810",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-04-08T02:01:09.100830+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456335"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in the Go `crypto/x509` package that could allow an attacker to bypass certificate validation. The vulnerability arises from an incorrect application of excluded DNS constraints to wildcard DNS Subject Alternative Names (SANs) when their case differs from the constraint. This could lead to Red Hat products accepting malicious certificates from otherwise trusted chains, compromising the trust model.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64"
],
"known_not_affected": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "RHBZ#2456335",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456335"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33810",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33810"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://go.dev/cl/763763",
"url": "https://go.dev/cl/763763"
},
{
"category": "external",
"summary": "https://go.dev/issue/78332",
"url": "https://go.dev/issue/78332"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4866",
"url": "https://pkg.go.dev/vuln/GO-2026-4866"
}
],
"release_date": "2026-04-08T01:06:56.546000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T14:47:37+00:00",
"details": "For OpenShift Container Platform 4.18 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/ocp-4-18-release-notes\n\nFor Red Hat OpenShift Logging 6.2, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.2",
"product_ids": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47952"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64"
],
"known_not_affected": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T14:47:37+00:00",
"details": "For OpenShift Container Platform 4.18 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/ocp-4-18-release-notes\n\nFor Red Hat OpenShift Logging 6.2, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.2",
"product_ids": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47952"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-34986",
"cwe": {
"id": "CWE-131",
"name": "Incorrect Calculation of Buffer Size"
},
"discovery_date": "2026-04-06T17:01:34.639203+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2455470"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64"
],
"known_not_affected": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "RHBZ#2455470",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455470"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-34986",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34986"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8",
"url": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants",
"url": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants"
}
],
"release_date": "2026-04-06T16:22:45.353000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T14:47:37+00:00",
"details": "For OpenShift Container Platform 4.18 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/ocp-4-18-release-notes\n\nFor Red Hat OpenShift Logging 6.2, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.2",
"product_ids": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47952"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object"
},
{
"cve": "CVE-2026-39820",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-07T20:01:27.800929+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467820"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net/mail` package. Applications processing untrusted email inputs via `ParseAddress`, `ParseAddressList`, or `ParseDate` functions are susceptible to excessive resource consumption, which can lead to service unavailability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64"
],
"known_not_affected": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "RHBZ#2467820",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467820"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39820",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://go.dev/cl/759940",
"url": "https://go.dev/cl/759940"
},
{
"category": "external",
"summary": "https://go.dev/issue/78566",
"url": "https://go.dev/issue/78566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4986",
"url": "https://pkg.go.dev/vuln/GO-2026-4986"
}
],
"release_date": "2026-05-07T19:41:19.854000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T14:47:37+00:00",
"details": "For OpenShift Container Platform 4.18 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/ocp-4-18-release-notes\n\nFor Red Hat OpenShift Logging 6.2, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.2",
"product_ids": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47952"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64"
],
"known_not_affected": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T14:47:37+00:00",
"details": "For OpenShift Container Platform 4.18 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/ocp-4-18-release-notes\n\nFor Red Hat OpenShift Logging 6.2, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.2",
"product_ids": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47952"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-42151",
"cwe": {
"id": "CWE-256",
"name": "Plaintext Storage of a Password"
},
"discovery_date": "2026-05-04T19:02:26.983660+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466507"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important information disclosure flaw in Prometheus affects instances configured to use Azure AD remote write with OAuth authentication. The client secret, intended to be a secure credential, is exposed in plaintext through the `/-/config` HTTP API endpoint. This could allow an attacker with access to this endpoint to retrieve the secret, potentially compromising integrated Azure AD services.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64"
],
"known_not_affected": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "RHBZ#2466507",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466507"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42151",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42151"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18587",
"url": "https://github.com/prometheus/prometheus/pull/18587"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18590",
"url": "https://github.com/prometheus/prometheus/pull/18590"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj"
}
],
"release_date": "2026-05-04T18:12:16.917000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T14:47:37+00:00",
"details": "For OpenShift Container Platform 4.18 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/ocp-4-18-release-notes\n\nFor Red Hat OpenShift Logging 6.2, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.2",
"product_ids": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47952"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API"
},
{
"cve": "CVE-2026-42154",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-05-04T19:02:19.626646+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466505"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in Prometheus, allowing an unauthenticated remote attacker to crash the Prometheus process. This could lead to service unavailability in Red Hat products that deploy Prometheus for monitoring, as the remote read endpoint does not properly validate snappy-compressed request lengths.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64"
],
"known_not_affected": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42154"
},
{
"category": "external",
"summary": "RHBZ#2466505",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466505"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42154",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42154"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18584",
"url": "https://github.com/prometheus/prometheus/pull/18584"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18585",
"url": "https://github.com/prometheus/prometheus/pull/18585"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm"
}
],
"release_date": "2026-05-04T18:13:12.340000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T14:47:37+00:00",
"details": "For OpenShift Container Platform 4.18 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/ocp-4-18-release-notes\n\nFor Red Hat OpenShift Logging 6.2, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.2",
"product_ids": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47952"
},
{
"category": "workaround",
"details": "To mitigate this issue, restrict network access to the Prometheus remote read endpoint (/api/v1/read). Configure firewall rules or network policies to permit connections only from trusted internal networks or authorized clients. This action reduces the attack surface by limiting exposure to unauthenticated remote attackers. A service restart or reload may be required for the changes to take effect.",
"product_ids": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint"
},
{
"cve": "CVE-2026-42499",
"cwe": {
"id": "CWE-1046",
"name": "Creation of Immutable Text Using String Concatenation"
},
"discovery_date": "2026-05-07T20:00:51.685602+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467809"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `net/mail` package of the Go standard library. A remote attacker can exploit this flaw by sending specially crafted email addresses, leading to excessive resource consumption and a denial of service in Go applications that parse email addresses using the affected library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64"
],
"known_not_affected": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "RHBZ#2467809",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467809"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42499",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42499"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://go.dev/cl/771520",
"url": "https://go.dev/cl/771520"
},
{
"category": "external",
"summary": "https://go.dev/issue/78987",
"url": "https://go.dev/issue/78987"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4977",
"url": "https://pkg.go.dev/vuln/GO-2026-4977"
}
],
"release_date": "2026-05-07T19:41:18.615000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T14:47:37+00:00",
"details": "For OpenShift Container Platform 4.18 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/ocp-4-18-release-notes\n\nFor Red Hat OpenShift Logging 6.2, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.2",
"product_ids": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47952"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing"
},
{
"cve": "CVE-2026-42504",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-06-02T23:01:00.320527+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484204"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Golang MIME (Multipurpose Internet Mail Extensions) package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is rated as an Important severity flaw. A remote attacker could trigger a Denial of Service by sending a crafted MIME header with numerous invalid encoded-words to an application utilizing the affected Golang MIME package. This could lead to excessive CPU consumption on the system processing the malformed header, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64"
],
"known_not_affected": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42504"
},
{
"category": "external",
"summary": "RHBZ#2484204",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484204"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42504",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42504"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42504",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42504"
},
{
"category": "external",
"summary": "https://go.dev/cl/774481",
"url": "https://go.dev/cl/774481"
},
{
"category": "external",
"summary": "https://go.dev/issue/79217",
"url": "https://go.dev/issue/79217"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5038",
"url": "https://pkg.go.dev/vuln/GO-2026-5038"
}
],
"release_date": "2026-06-02T22:01:37.219000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T14:47:37+00:00",
"details": "For OpenShift Container Platform 4.18 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/ocp-4-18-release-notes\n\nFor Red Hat OpenShift Logging 6.2, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.2",
"product_ids": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47952"
},
{
"category": "workaround",
"details": "To mitigate this issue, restrict network access to services that process MIME headers from untrusted sources. Implement input validation and sanitization for all incoming data, especially MIME headers, to prevent maliciously crafted content from being processed by applications utilizing the vulnerable Golang MIME package.",
"product_ids": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header"
}
]
}
RHSA-2026:48151
Vulnerability from csaf_redhat - Published: 2026-07-29 19:53 - Updated: 2026-08-26 04:26Summary
Red Hat Security Advisory: Red Hat build of Cryostat security update
Severity
Important
Notes
Topic: An update is now available for the Red Hat build of Cryostat 4 on RHEL 9.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: An update is now available for the Red Hat build of Cryostat 4 on RHEL 9.
Security Fix(es):
* netty-handler: Denial of Service due to eager buffer allocation in TLS handshake (CVE-2026-45416)
* netty-resolver-dns: Information disclosure and data manipulation due to improper CNAME record validation (CVE-2026-45674)
* netty-handler: Improper trust manager handling leads to hostname verification bypass (CVE-2026-50010)
* io.netty/netty-resolver-dns: Netty has Insufficient Bailiwick Validation for NS Records (CVE-2026-47691)
* netty-codec-haproxy: Netty HAProxy PROXY protocol v2 codec: Denial of Service via memory leak from crafted PROXY protocol headers (CVE-2026-48059)
* netty-codec-http2: Denial of Service due to resource leak (CVE-2026-48043)
* netty-codec-haproxy: Denial of Service via malformed HAProxy message (CVE-2026-44893)
* netty-handler: IPv6 subnet rule bypass due to incorrect masking operation (CVE-2026-44249)
* io.quarkus/quarkus-vertx-http: Authorization bypass in HTTP path-based policies via encoded characters (CVE-2026-50559)
* jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass (CVE-2026-54512)
* jackson-databind: Security bypass allows arbitrary code execution (CVE-2026-54513)
* eclipse-vertx/vert.x: Denial of Service via TLS handshake with wildcard server name (CVE-2026-6860)
* golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation (CVE-2026-46595)
* golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters (CVE-2026-39829)
* golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions (CVE-2026-39828)
* golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate (CVE-2026-39835)
* golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses (CVE-2026-39830)
* golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass (CVE-2026-27136)
* golang.org/x/net/html: Cross-Site Scripting allowing arbitrary code execution (CVE-2026-25681)
* golang.org/x/image/tiff: Denial of Service via crafted PackBits-compressed data (CVE-2026-46599)
* github.com/hamba/avro/v2: github.com/linkedin/goavro/v2: Integer Overflow in Avro Decoder (CVE-2026-46384)
* github.com/hamba/avro/v2: github.com/linkedin/goavro/v2: CPU Exhaustion in Avro Decoder via Unbounded Block-Count Iteration (CVE-2026-46385)
* net: golang: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811)
* mime: golang: Denial of Service via maliciously-crafted MIME header (CVE-2026-42504)
* form-data: Form field override via CRLF injection (CVE-2026-12143)
* ws: Denial of Service via memory exhaustion from small WebSocket fragments (CVE-2026-48779)
* ws: Uninitialized memory disclosure via websocket.close() with TypedArray (CVE-2026-45736)
* undici: Denial of Service due to unbounded memory growth via WebSocket frames (CVE-2026-12151)
* undici: Man-in-the-Middle attack via ignored TLS options with SOCKS5 proxy (CVE-2026-9697)
* undici: Information disclosure and data integrity issues due to incorrect Socks5ProxyAgent connection routing (CVE-2026-6734)
* js-cookie: Cookie attribute manipulation via prototype pollution (CVE-2026-46625)
* brace-expansion: Denial of Service due to exponential-time complexity (CVE-2026-13149)
* protobufjs: Denial of Service via crafted schema (CVE-2026-44290)
* protobufjs: Data integrity impact due to prototype pollution (CVE-2026-44292)
* protobufjs: Denial of Service via crafted JSON descriptors (CVE-2026-45740)
* protobufjs: Arbitrary Code Execution via prototype pollution (CVE-2026-44291)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in undici. When using Socks5ProxyAgent, undici incorrectly reuses a single connection pool across different origins. This can lead to cross-origin request routing, where sensitive credentials and data intended for one destination are sent to another. Consequently, responses from unintended origins may be trusted, and secure HTTPS connections could be silently downgraded to unencrypted HTTP, resulting in information disclosure and data integrity issues.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in eclipse-vertx/vert.x. A remote attacker can exploit this vulnerability by performing a Transport Layer Security (TLS) handshake and presenting a server name extension with a server wildcard name. This can lead to a denial of service (DoS) condition, impacting the availability of the affected system.
5.3 (Medium)
Affected products
Fixed
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in undici. When undici's ProxyAgent is configured with a SOCKS5 proxy Uniform Resource Identifier (URI), it silently ignores Transport Layer Security (TLS) options, such as custom Certificate Authorities (CAs). This allows a remote attacker to perform a Man-in-the-Middle (MITM) attack, intercepting and tampering with HTTPS communications. The connection falls back to Node.js's default trust store, bypassing intended security configurations and potentially leading to information disclosure or arbitrary code execution.
7.4 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in undici. A malicious WebSocket server can exploit this by streaming numerous small or empty continuation frames. This can bypass per-frame and cumulative-size validation, leading to unbounded memory growth in the client process. The primary consequence is memory exhaustion, resulting in a denial of service (DoS) for affected applications using the undici WebSocket client or WebSocketStream API.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in brace-expansion. An attacker can exploit a vulnerability in the `expand()` function by providing a specially crafted string. This string, containing consecutive non-expanding brace groups, can trigger exponential-time complexity, leading to significant CPU consumption and event-loop blocking. This can result in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.
8.1 (High)
Affected products
Fixed
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.
8.8 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection's read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the Golang MIME (Multipurpose Internet Mail Extensions) package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in netty-handler, a component of the Netty network application framework. A remote attacker can exploit an incorrect masking operation in the IpSubnetFilterRule.compareTo() function to bypass configured IPv6 subnet rules. This allows valid public IP addresses to circumvent intended network restrictions, potentially leading to unauthorized access or exposure of services.
8.1 (High)
Affected products
Fixed
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in protobufjs. This vulnerability allows an attacker to craft a protobuf schema or JSON descriptor that, when processed, can traverse through inherited object properties. This can lead to writing to global JavaScript constructors, corrupting process-wide built-in functionality. The most significant impact is a denial of service (DoS).
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in protobufjs, a library that compiles protobuf definitions into JavaScript functions. This prototype pollution vulnerability occurs when `Object.prototype` is polluted, allowing attacker-controlled properties to be resolved as valid protobuf type information. This can lead to attacker-controlled strings being emitted into generated JavaScript code, potentially resulting in arbitrary code execution.
8.1 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in protobufjs, a library that compiles protobuf definitions into JavaScript functions. This vulnerability allows an attacker to manipulate the internal structure of message objects. By providing a specially crafted input, an attacker could alter the prototype of individual message instances, potentially leading to unauthorized modification of data or unexpected application behavior, thereby impacting data integrity.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in netty-codec-haproxy, a component of the Netty network application framework. A remote attacker can exploit this vulnerability by sending a specially crafted HAProxy message with a malformed PP2_TYPE_SSL TLV (Type-Length-Value) header. This can lead to an IndexOutOfBoundsException and prevent the release of retained memory, ultimately causing a Denial of Service (DoS) condition for the affected application.
7.5 (High)
Affected products
Fixed
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Netty, a network application framework. A remote attacker can exploit this vulnerability by sending a crafted TLS (Transport Layer Security) ClientHello message. This can lead to an eager allocation of a large memory buffer, causing a Denial of Service (DoS) due to excessive memory consumption. The issue occurs in the `SslClientHelloHandler.decode()` method when processing the TLS handshake length.
7.5 (High)
Affected products
Fixed
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Netty's DnsResolveContext. This vulnerability allows a remote attacker to achieve information disclosure or data manipulation by crafting malicious DNS responses. The flaw occurs because the DnsResolveContext fails to validate the origin (bailiwick) of CNAME records in DNS responses, which could enable an attacker to redirect network traffic or intercept sensitive data from affected applications.
8.7 (High)
Affected products
Fixed
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in ws, an open source WebSocket client and server for Node.js. The `websocket.close()` implementation is vulnerable to uninitialized memory disclosure when a `TypedArray` is passed as the reason argument. This can lead to the disclosure of sensitive information from uninitialized memory.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Vendor Fix
fix
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Threats
Impact
Important
A flaw was found in protobufjs. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by providing a crafted JSON descriptor with deeply nested namespace definitions. This can lead to the exhaustion of the JavaScript call stack during descriptor loading, making the application unresponsive.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Workaround
|
Threats
Impact
Important
An integer overflow flaw was found in Go Avro in decoding logic. Multiple decoder paths performs unsafe integer conversions and overflow-prone arithmetic operations on attacker-controlled values from Avro payloads. A remote attacker during Avro decoder operations could exploit this issue using specially crafted Avro data to consume excessive resources by bypassing memory limits and triggering crashes leading to a denial of service in affected applications.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the Avro array and map decoding logic in Go Avro. The decoder failed to properly stop processing after encountering read errors while iterating over attacker-controlled block-count values, leading to excessive resource consumption. A remote unauthenticated attacker could exploit this issue using specially crafted Avro payloads causing denial of service, where the affected system's CPU is consumed indefinitely until the process is terminated.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.
7.1 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Vendor Fix
fix
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Threats
Impact
Important
A flaw was found in the `golang.org/x/image/tiff` package's TIFF decoder. This vulnerability occurs because the decoder does not properly limit the size of PackBits-compressed data. A remote attacker could exploit this by providing a maliciously-crafted image, leading to the decoder processing excessive amounts of data. This can result in a Denial of Service (DoS) due to resource exhaustion, even with a small input image.
6.5 (Medium)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in JavaScript Cookie (js-cookie). This vulnerability allows a remote attacker to manipulate cookie attributes by exploiting a prototype pollution issue within the `assign()` helper function. When processing specially crafted JSON input, the flaw enables an attacker to hijack the prototype of a cookie's attribute object. This allows the attacker to set sensitive cookie attributes such as `domain`, `secure`, `samesite`, `expires`, and `path`, potentially leading to security bypasses or session manipulation.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Netty's `DnsResolveContext`. An attacker controlling an authoritative name server for a subdomain can exploit this vulnerability by providing crafted NS records that are insufficiently validated. This allows the attacker to poison the DNS cache for parent domains, bypassing standard bailiwick rules. Consequently, future DNS resolutions for the affected parent domain will use the poisoned cache, potentially redirecting users to malicious servers and leading to information disclosure or integrity compromise.
8.7 (High)
Affected products
Fixed
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in netty-codec-http2. A remote attacker could send specially crafted frames that cause a resource leak within the `DelegatingDecompressorFrameListener` class. This resource leak could lead to an Out Of Memory Error (OOME), potentially causing a Denial of Service (DoS) by taking down the entire Java Virtual Machine (JVM).
7.5 (High)
Affected products
Fixed
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the Netty HAProxy PROXY protocol v2 codec. A remote attacker can exploit this vulnerability by sending a specially crafted HAProxy PROXY protocol v2 header with nested `PP2_TYPE_SSL` type-length-value (TLV) records. This can lead to a memory leak, causing the underlying cumulation buffer to remain permanently pinned and potentially resulting in a Denial of Service (DoS) due to resource exhaustion.
7.5 (High)
Affected products
Fixed
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in ws, an open source WebSocket client and server. A remote attacker can exploit this memory exhaustion vulnerability by sending a high volume of exceptionally small fragments and data chunks. This action forces the affected component to allocate and hold structural wrappers that consume excessive memory. Consequently, this leads to process termination and a denial of service (DoS) for the remote peer.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Netty, a network application framework. This vulnerability allows a remote attacker to bypass hostname verification due to improper handling of user-supplied trust managers. When a client is configured with a plain X.509 Trust Manager (X509TrustManager), it fails to perform necessary hostname checks, enabling an attacker to impersonate a legitimate server. This could lead to sensitive information disclosure or man-in-the-middle attacks.
7.5 (High)
Affected products
Fixed
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Quarkus. A remote attacker could bypass HTTP path-based authorization policies by using specially crafted encoded semicolons, slashes, or backslashes in HTTP requests. This could allow unauthorized access to protected static resources, leading to information disclosure.
7.5 (High)
Affected products
Fixed
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in jackson-databind. This vulnerability allows a remote attacker to bypass the PolymorphicTypeValidator (PTV) when polymorphic typing is enabled and a type identifier contains generic parameters. By crafting a malicious type ID, an attacker can place a denied class as a generic type parameter of an allowed container. This leads to the loading and instantiation of arbitrary classes, potentially resulting in arbitrary code execution.
8.1 (High)
Affected products
Fixed
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in jackson-databind, a library used for processing data. This vulnerability allows an attacker to bypass security controls designed to validate data types. By sending specially crafted input, an attacker can force the system to process untrusted data, which may lead to the execution of malicious code. This could result in a complete compromise of the affected system, impacting its confidentiality, integrity, and availability.
8.1 (High)
Affected products
Fixed
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Workaround
|
Threats
Impact
Important
References
272 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update is now available for the Red Hat build of Cryostat 4 on RHEL 9.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "An update is now available for the Red Hat build of Cryostat 4 on RHEL 9.\n\nSecurity Fix(es):\n\n* netty-handler: Denial of Service due to eager buffer allocation in TLS handshake (CVE-2026-45416)\n* netty-resolver-dns: Information disclosure and data manipulation due to improper CNAME record validation (CVE-2026-45674)\n* netty-handler: Improper trust manager handling leads to hostname verification bypass (CVE-2026-50010)\n* io.netty/netty-resolver-dns: Netty has Insufficient Bailiwick Validation for NS Records (CVE-2026-47691)\n* netty-codec-haproxy: Netty HAProxy PROXY protocol v2 codec: Denial of Service via memory leak from crafted PROXY protocol headers (CVE-2026-48059)\n* netty-codec-http2: Denial of Service due to resource leak (CVE-2026-48043)\n* netty-codec-haproxy: Denial of Service via malformed HAProxy message (CVE-2026-44893)\n* netty-handler: IPv6 subnet rule bypass due to incorrect masking operation (CVE-2026-44249)\n* io.quarkus/quarkus-vertx-http: Authorization bypass in HTTP path-based policies via encoded characters (CVE-2026-50559)\n* jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass (CVE-2026-54512)\n* jackson-databind: Security bypass allows arbitrary code execution (CVE-2026-54513)\n* eclipse-vertx/vert.x: Denial of Service via TLS handshake with wildcard server name (CVE-2026-6860)\n* golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation (CVE-2026-46595)\n* golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters (CVE-2026-39829)\n* golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions (CVE-2026-39828)\n* golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate (CVE-2026-39835)\n* golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses (CVE-2026-39830)\n* golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass (CVE-2026-27136)\n* golang.org/x/net/html: Cross-Site Scripting allowing arbitrary code execution (CVE-2026-25681)\n* golang.org/x/image/tiff: Denial of Service via crafted PackBits-compressed data (CVE-2026-46599)\n* github.com/hamba/avro/v2: github.com/linkedin/goavro/v2: Integer Overflow in Avro Decoder (CVE-2026-46384)\n* github.com/hamba/avro/v2: github.com/linkedin/goavro/v2: CPU Exhaustion in Avro Decoder via Unbounded Block-Count Iteration (CVE-2026-46385)\n* net: golang: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811)\n* mime: golang: Denial of Service via maliciously-crafted MIME header (CVE-2026-42504)\n* form-data: Form field override via CRLF injection (CVE-2026-12143)\n* ws: Denial of Service via memory exhaustion from small WebSocket fragments (CVE-2026-48779)\n* ws: Uninitialized memory disclosure via websocket.close() with TypedArray (CVE-2026-45736)\n* undici: Denial of Service due to unbounded memory growth via WebSocket frames (CVE-2026-12151)\n* undici: Man-in-the-Middle attack via ignored TLS options with SOCKS5 proxy (CVE-2026-9697)\n* undici: Information disclosure and data integrity issues due to incorrect Socks5ProxyAgent connection routing (CVE-2026-6734)\n* js-cookie: Cookie attribute manipulation via prototype pollution (CVE-2026-46625)\n* brace-expansion: Denial of Service due to exponential-time complexity (CVE-2026-13149)\n* protobufjs: Denial of Service via crafted schema (CVE-2026-44290)\n* protobufjs: Data integrity impact due to prototype pollution (CVE-2026-44292)\n* protobufjs: Denial of Service via crafted JSON descriptors (CVE-2026-45740)\n* protobufjs: Arbitrary Code Execution via prototype pollution (CVE-2026-44291)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:48151",
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2466990",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466990"
},
{
"category": "external",
"summary": "2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "2477081",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477081"
},
{
"category": "external",
"summary": "2477088",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477088"
},
{
"category": "external",
"summary": "2477100",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477100"
},
{
"category": "external",
"summary": "2477111",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477111"
},
{
"category": "external",
"summary": "2477914",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477914"
},
{
"category": "external",
"summary": "2480680",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480680"
},
{
"category": "external",
"summary": "2480681",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480681"
},
{
"category": "external",
"summary": "2480684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480684"
},
{
"category": "external",
"summary": "2480687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480687"
},
{
"category": "external",
"summary": "2480689",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480689"
},
{
"category": "external",
"summary": "2480757",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480757"
},
{
"category": "external",
"summary": "2480761",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480761"
},
{
"category": "external",
"summary": "2483473",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2483473"
},
{
"category": "external",
"summary": "2483475",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2483475"
},
{
"category": "external",
"summary": "2483482",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2483482"
},
{
"category": "external",
"summary": "2484204",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484204"
},
{
"category": "external",
"summary": "2486959",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2486959"
},
{
"category": "external",
"summary": "2487740",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487740"
},
{
"category": "external",
"summary": "2488081",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488081"
},
{
"category": "external",
"summary": "2488383",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488383"
},
{
"category": "external",
"summary": "2488391",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488391"
},
{
"category": "external",
"summary": "2488400",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488400"
},
{
"category": "external",
"summary": "2488429",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488429"
},
{
"category": "external",
"summary": "2488437",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488437"
},
{
"category": "external",
"summary": "2488439",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488439"
},
{
"category": "external",
"summary": "2488442",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488442"
},
{
"category": "external",
"summary": "2488480",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488480"
},
{
"category": "external",
"summary": "2489661",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2489661"
},
{
"category": "external",
"summary": "2489980",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2489980"
},
{
"category": "external",
"summary": "2490018",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2490018"
},
{
"category": "external",
"summary": "2490024",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2490024"
},
{
"category": "external",
"summary": "2492010",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2492010"
},
{
"category": "external",
"summary": "2492015",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2492015"
},
{
"category": "external",
"summary": "2494813",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2494813"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_48151.json"
}
],
"title": "Red Hat Security Advisory: Red Hat build of Cryostat security update",
"tracking": {
"current_release_date": "2026-08-26T04:26:28+00:00",
"generator": {
"date": "2026-08-26T04:26:28+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:48151",
"initial_release_date": "2026-07-29T19:53:07+00:00",
"revision_history": [
{
"date": "2026-07-29T19:53:07+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-29T19:53:07+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-26T04:26:28+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Cryostat 4 on RHEL 9",
"product": {
"name": "Cryostat 4 on RHEL 9",
"product_id": "9Base-Cryostat-4",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:cryostat:4::el9"
}
}
}
],
"category": "product_family",
"name": "Cryostat"
},
{
"branches": [
{
"category": "product_version",
"name": "cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"product": {
"name": "cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"product_id": "cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1?arch=arm64\u0026repository_url=registry.redhat.io/cryostat/cryostat-agent-init-rhel9\u0026tag=0.7.0-11"
}
}
},
{
"category": "product_version",
"name": "cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"product": {
"name": "cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"product_id": "cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f?arch=arm64\u0026repository_url=registry.redhat.io/cryostat/cryostat-db-rhel9\u0026tag=4.2.0-19"
}
}
},
{
"category": "product_version",
"name": "cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"product": {
"name": "cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"product_id": "cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101?arch=arm64\u0026repository_url=registry.redhat.io/cryostat/cryostat-grafana-dashboard-rhel9\u0026tag=4.2.0-13"
}
}
},
{
"category": "product_version",
"name": "cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"product": {
"name": "cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"product_id": "cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663?arch=arm64\u0026repository_url=registry.redhat.io/cryostat/cryostat-openshift-console-plugin-rhel9\u0026tag=4.2.0-13"
}
}
},
{
"category": "product_version",
"name": "cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"product": {
"name": "cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"product_id": "cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6?arch=arm64\u0026repository_url=registry.redhat.io/cryostat/cryostat-reports-rhel9\u0026tag=4.2.0-13"
}
}
},
{
"category": "product_version",
"name": "cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"product": {
"name": "cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"product_id": "cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6?arch=arm64\u0026repository_url=registry.redhat.io/cryostat/cryostat-rhel9\u0026tag=4.2.0-13"
}
}
},
{
"category": "product_version",
"name": "cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"product": {
"name": "cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"product_id": "cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292?arch=arm64\u0026repository_url=registry.redhat.io/cryostat/cryostat-operator-bundle\u0026tag=4.2.0-11"
}
}
},
{
"category": "product_version",
"name": "cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"product": {
"name": "cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"product_id": "cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f?arch=arm64\u0026repository_url=registry.redhat.io/cryostat/cryostat-rhel9-operator\u0026tag=4.2.0-18"
}
}
},
{
"category": "product_version",
"name": "cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"product": {
"name": "cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"product_id": "cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850?arch=arm64\u0026repository_url=registry.redhat.io/cryostat/cryostat-storage-rhel9\u0026tag=4.2.0-19"
}
}
},
{
"category": "product_version",
"name": "cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64",
"product": {
"name": "cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64",
"product_id": "cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64",
"product_identification_helper": {
"purl": "pkg:oci/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a?arch=arm64\u0026repository_url=registry.redhat.io/cryostat/jfr-datasource-rhel9\u0026tag=4.2.0-13"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"product": {
"name": "cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"product_id": "cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579?arch=amd64\u0026repository_url=registry.redhat.io/cryostat/cryostat-agent-init-rhel9\u0026tag=0.7.0-11"
}
}
},
{
"category": "product_version",
"name": "cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"product": {
"name": "cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"product_id": "cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3?arch=amd64\u0026repository_url=registry.redhat.io/cryostat/cryostat-db-rhel9\u0026tag=4.2.0-19"
}
}
},
{
"category": "product_version",
"name": "cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"product": {
"name": "cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"product_id": "cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f?arch=amd64\u0026repository_url=registry.redhat.io/cryostat/cryostat-grafana-dashboard-rhel9\u0026tag=4.2.0-13"
}
}
},
{
"category": "product_version",
"name": "cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"product": {
"name": "cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"product_id": "cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1?arch=amd64\u0026repository_url=registry.redhat.io/cryostat/cryostat-openshift-console-plugin-rhel9\u0026tag=4.2.0-13"
}
}
},
{
"category": "product_version",
"name": "cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"product": {
"name": "cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"product_id": "cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe?arch=amd64\u0026repository_url=registry.redhat.io/cryostat/cryostat-reports-rhel9\u0026tag=4.2.0-13"
}
}
},
{
"category": "product_version",
"name": "cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"product": {
"name": "cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"product_id": "cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc?arch=amd64\u0026repository_url=registry.redhat.io/cryostat/cryostat-rhel9\u0026tag=4.2.0-13"
}
}
},
{
"category": "product_version",
"name": "cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"product": {
"name": "cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"product_id": "cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6?arch=amd64\u0026repository_url=registry.redhat.io/cryostat/cryostat-operator-bundle\u0026tag=4.2.0-11"
}
}
},
{
"category": "product_version",
"name": "cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"product": {
"name": "cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"product_id": "cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45?arch=amd64\u0026repository_url=registry.redhat.io/cryostat/cryostat-rhel9-operator\u0026tag=4.2.0-18"
}
}
},
{
"category": "product_version",
"name": "cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"product": {
"name": "cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"product_id": "cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467?arch=amd64\u0026repository_url=registry.redhat.io/cryostat/cryostat-storage-rhel9\u0026tag=4.2.0-19"
}
}
},
{
"category": "product_version",
"name": "cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"product": {
"name": "cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"product_id": "cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"product_identification_helper": {
"purl": "pkg:oci/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134?arch=amd64\u0026repository_url=registry.redhat.io/cryostat/jfr-datasource-rhel9\u0026tag=4.2.0-13"
}
}
}
],
"category": "architecture",
"name": "amd64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 as a component of Cryostat 4 on RHEL 9",
"product_id": "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64"
},
"product_reference": "cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"relates_to_product_reference": "9Base-Cryostat-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 as a component of Cryostat 4 on RHEL 9",
"product_id": "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64"
},
"product_reference": "cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"relates_to_product_reference": "9Base-Cryostat-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 as a component of Cryostat 4 on RHEL 9",
"product_id": "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64"
},
"product_reference": "cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"relates_to_product_reference": "9Base-Cryostat-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 as a component of Cryostat 4 on RHEL 9",
"product_id": "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64"
},
"product_reference": "cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"relates_to_product_reference": "9Base-Cryostat-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 as a component of Cryostat 4 on RHEL 9",
"product_id": "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64"
},
"product_reference": "cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"relates_to_product_reference": "9Base-Cryostat-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 as a component of Cryostat 4 on RHEL 9",
"product_id": "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64"
},
"product_reference": "cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"relates_to_product_reference": "9Base-Cryostat-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 as a component of Cryostat 4 on RHEL 9",
"product_id": "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64"
},
"product_reference": "cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"relates_to_product_reference": "9Base-Cryostat-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 as a component of Cryostat 4 on RHEL 9",
"product_id": "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64"
},
"product_reference": "cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"relates_to_product_reference": "9Base-Cryostat-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 as a component of Cryostat 4 on RHEL 9",
"product_id": "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64"
},
"product_reference": "cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"relates_to_product_reference": "9Base-Cryostat-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 as a component of Cryostat 4 on RHEL 9",
"product_id": "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64"
},
"product_reference": "cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"relates_to_product_reference": "9Base-Cryostat-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 as a component of Cryostat 4 on RHEL 9",
"product_id": "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64"
},
"product_reference": "cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"relates_to_product_reference": "9Base-Cryostat-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 as a component of Cryostat 4 on RHEL 9",
"product_id": "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64"
},
"product_reference": "cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"relates_to_product_reference": "9Base-Cryostat-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 as a component of Cryostat 4 on RHEL 9",
"product_id": "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64"
},
"product_reference": "cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"relates_to_product_reference": "9Base-Cryostat-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 as a component of Cryostat 4 on RHEL 9",
"product_id": "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64"
},
"product_reference": "cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"relates_to_product_reference": "9Base-Cryostat-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 as a component of Cryostat 4 on RHEL 9",
"product_id": "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64"
},
"product_reference": "cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"relates_to_product_reference": "9Base-Cryostat-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 as a component of Cryostat 4 on RHEL 9",
"product_id": "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64"
},
"product_reference": "cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"relates_to_product_reference": "9Base-Cryostat-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 as a component of Cryostat 4 on RHEL 9",
"product_id": "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64"
},
"product_reference": "cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"relates_to_product_reference": "9Base-Cryostat-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 as a component of Cryostat 4 on RHEL 9",
"product_id": "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
},
"product_reference": "cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"relates_to_product_reference": "9Base-Cryostat-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 as a component of Cryostat 4 on RHEL 9",
"product_id": "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64"
},
"product_reference": "cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"relates_to_product_reference": "9Base-Cryostat-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 as a component of Cryostat 4 on RHEL 9",
"product_id": "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
},
"product_reference": "cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64",
"relates_to_product_reference": "9Base-Cryostat-4"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-6734",
"cwe": {
"id": "CWE-940",
"name": "Improper Verification of Source of a Communication Channel"
},
"discovery_date": "2026-06-17T19:04:00.272340+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2490024"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in undici. When using Socks5ProxyAgent, undici incorrectly reuses a single connection pool across different origins. This can lead to cross-origin request routing, where sensitive credentials and data intended for one destination are sent to another. Consequently, responses from unintended origins may be trusted, and secure HTTPS connections could be silently downgraded to unencrypted HTTP, resulting in information disclosure and data integrity issues.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "undici: undici: Information disclosure and data integrity issues due to incorrect Socks5ProxyAgent connection routing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is rated as an Important security flaw. The `undici` library, when configured with `Socks5ProxyAgent` to handle requests for multiple origins, incorrectly reuses connection pools. This can lead to sensitive data and credentials being misrouted to unintended destinations, potentially downgrading HTTPS connections to HTTP and compromising data integrity and confidentiality. Red Hat products utilizing `undici` with `Socks5ProxyAgent` in multi-origin scenarios are affected.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-6734"
},
{
"category": "external",
"summary": "RHBZ#2490024",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2490024"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-6734",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6734"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-6734",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6734"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/nodejs/undici/security/advisories/GHSA-hm92-r4w5-c3mj",
"url": "https://github.com/nodejs/undici/security/advisories/GHSA-hm92-r4w5-c3mj"
}
],
"release_date": "2026-06-17T16:36:55.439000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "The single most impactful mitigation is applying network egress controls to restrict which external destinations affected applications can reach. Because the vulnerability causes requests to be misrouted to wrong origins, limiting the set of reachable origins directly reduces the attack surface. These controls collectively limit the blast radius of the connection pool misrouting \u2014 the attacker must compromise one of the explicitly allowed destinations rather than any arbitrary origin \u2014 but they do not fix the underlying logic bug.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "undici: undici: Information disclosure and data integrity issues due to incorrect Socks5ProxyAgent connection routing"
},
{
"cve": "CVE-2026-6860",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-05-06T10:01:43.929832+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466990"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in eclipse-vertx/vert.x. A remote attacker can exploit this vulnerability by performing a Transport Layer Security (TLS) handshake and presenting a server name extension with a server wildcard name. This can lead to a denial of service (DoS) condition, impacting the availability of the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "eclipse-vertx/vert.x: eclipse-vertx/vert.x: Denial of Service via TLS handshake with wildcard server name",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw is rated as Moderate because a remote attacker can trigger a denial of service in Red Hat products that use `eclipse-vertx/vert.x` and are configured with TLS wildcard server names. Exploitation occurs during the TLS handshake, impacting service availability without affecting data confidentiality or integrity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-6860"
},
{
"category": "external",
"summary": "RHBZ#2466990",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466990"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-6860",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6860"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-6860",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6860"
},
{
"category": "external",
"summary": "https://github.com/eclipse-vertx/vert.x/pull/6102",
"url": "https://github.com/eclipse-vertx/vert.x/pull/6102"
},
{
"category": "external",
"summary": "https://github.com/eclipse-vertx/vert.x/security/advisories/GHSA-3g76-f9xq-8vp6",
"url": "https://github.com/eclipse-vertx/vert.x/security/advisories/GHSA-3g76-f9xq-8vp6"
},
{
"category": "external",
"summary": "https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/381",
"url": "https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/381"
}
],
"release_date": "2026-05-06T09:55:12.531000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "eclipse-vertx/vert.x: eclipse-vertx/vert.x: Denial of Service via TLS handshake with wildcard server name"
},
{
"cve": "CVE-2026-9697",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-06-17T19:03:30.813843+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2490018"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in undici. When undici\u0027s ProxyAgent is configured with a SOCKS5 proxy Uniform Resource Identifier (URI), it silently ignores Transport Layer Security (TLS) options, such as custom Certificate Authorities (CAs). This allows a remote attacker to perform a Man-in-the-Middle (MITM) attack, intercepting and tampering with HTTPS communications. The connection falls back to Node.js\u0027s default trust store, bypassing intended security configurations and potentially leading to information disclosure or arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "undici: undici: Man-in-the-Middle attack via ignored TLS options with SOCKS5 proxy",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important vulnerability. Applications using `undici`\u0027s `ProxyAgent` with a SOCKS5 proxy URI will silently ignore user-configured TLS options, including custom Certificate Authorities. This bypasses intended security controls for HTTPS communication, enabling a remote attacker to perform Man-in-the-Middle attacks, potentially leading to information disclosure or arbitrary code execution in affected Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-9697"
},
{
"category": "external",
"summary": "RHBZ#2490018",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2490018"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-9697",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-9697"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-9697",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-9697"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/nodejs/undici/security/advisories/GHSA-vmh5-mc38-953g",
"url": "https://github.com/nodejs/undici/security/advisories/GHSA-vmh5-mc38-953g"
}
],
"release_date": "2026-06-17T16:46:42.706000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "undici: undici: Man-in-the-Middle attack via ignored TLS options with SOCKS5 proxy"
},
{
"cve": "CVE-2026-12143",
"cwe": {
"id": "CWE-93",
"name": "Improper Neutralization of CRLF Sequences (\u0027CRLF Injection\u0027)"
},
"discovery_date": "2026-06-12T19:00:57.360953+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488480"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (\") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "form-data: form-data: Form field override via CRLF injection",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important impact flaw in the form-data library: a remote attacker can inject arbitrary headers or additional multipart parts via CRLF injection in field names or filenames, potentially overriding sensitive form fields and affecting data integrity.\n\nFor RHOAI and RHEL AI, severity is Moderate because affected versions appear only as a transitive npm dependency in RHOAI (dashboard, mod-arch plugins, MLflow UI) and RHEL AI 3.4 bootc images, and those products use fixed field names for uploads rather than passing untrusted user input as multipart field names or filenames. The documented exploit path is therefore not reachable in default deployments. Practical impact is limited to non-default or custom integrations that forward multipart requests using attacker-controlled field names.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-12143"
},
{
"category": "external",
"summary": "RHBZ#2488480",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488480"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-12143",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-12143"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-12143",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-12143"
},
{
"category": "external",
"summary": "https://cwe.mitre.org/data/definitions/93.html",
"url": "https://cwe.mitre.org/data/definitions/93.html"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435",
"url": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229",
"url": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045",
"url": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx",
"url": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx"
},
{
"category": "external",
"summary": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data",
"url": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/form-data",
"url": "https://www.npmjs.com/package/form-data"
}
],
"release_date": "2026-06-12T18:01:30.362000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "Applications using the `form-data` library should implement strict input validation and sanitization for all field names and filenames derived from untrusted sources. This prevents the injection of control characters (CR, LF, \") that could lead to header injection or form field overrides. Deployments that exclusively use fixed or trusted field names are not impacted.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "form-data: form-data: Form field override via CRLF injection"
},
{
"cve": "CVE-2026-12151",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-17T17:01:45.297604+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2489980"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in undici. A malicious WebSocket server can exploit this by streaming numerous small or empty continuation frames. This can bypass per-frame and cumulative-size validation, leading to unbounded memory growth in the client process. The primary consequence is memory exhaustion, resulting in a denial of service (DoS) for affected applications using the undici WebSocket client or WebSocketStream API.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "undici: undici: Denial of Service due to unbounded memory growth via WebSocket frames",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important denial of service flaw in the `undici` WebSocket client allows a remote attacker to cause unbounded memory growth. By sending numerous small or empty WebSocket frames, an unauthenticated attacker can exhaust system memory, leading to a denial of service in Red Hat products that use the affected client.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-12151"
},
{
"category": "external",
"summary": "RHBZ#2489980",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2489980"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-12151",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-12151"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-12151",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-12151"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/nodejs/undici/security/advisories/GHSA-vxpw-j846-p89q",
"url": "https://github.com/nodejs/undici/security/advisories/GHSA-vxpw-j846-p89q"
}
],
"release_date": "2026-06-17T16:05:38.785000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "undici: undici: Denial of Service due to unbounded memory growth via WebSocket frames"
},
{
"cve": "CVE-2026-13149",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-06-30T10:00:59.843854+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2494813"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in brace-expansion. An attacker can exploit a vulnerability in the `expand()` function by providing a specially crafted string. This string, containing consecutive non-expanding brace groups, can trigger exponential-time complexity, leading to significant CPU consumption and event-loop blocking. This can result in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in brace-expansion, a widely-used npm package for expanding brace sequences. The expand() function exhibits exponential-time complexity when processing consecutive non-expanding brace groups. An attacker who can supply crafted input to expand(), directly or transitively via minimatch or glob, can cause significant CPU consumption and event-loop blocking, resulting in denial of service. The max option does not mitigate this issue, as it bounds the output size rather than the recursion work.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-13149"
},
{
"category": "external",
"summary": "RHBZ#2494813",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2494813"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-13149",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-13149"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-13149",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-13149"
},
{
"category": "external",
"summary": "https://github.com/juliangruber/brace-expansion/commit/c7e33ec13ac1a684c116720843ce24e208611754",
"url": "https://github.com/juliangruber/brace-expansion/commit/c7e33ec13ac1a684c116720843ce24e208611754"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/brace-expansion",
"url": "https://www.npmjs.com/package/brace-expansion"
}
],
"release_date": "2026-06-30T08:30:34.502000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "There is no practical mitigation for this vulnerability. The brace-expansion package is typically a transitive dependency pulled in via minimatch and glob, making it difficult to isolate. Users should upgrade to a fixed version of brace-expansion when one becomes available.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity"
},
{
"cve": "CVE-2026-25681",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:01:08.177603+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480761"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/net/html` could enable remote attackers to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution. The flaw allows specially crafted HTML to bypass input sanitization during parsing and rendering. Red Hat products are affected if they process untrusted HTML content using the vulnerable component without additional output encoding or robust content security policies.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "RHBZ#2480761",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480761"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25681",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25681"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://go.dev/cl/781703",
"url": "https://go.dev/cl/781703"
},
{
"category": "external",
"summary": "https://go.dev/issue/79574",
"url": "https://go.dev/issue/79574"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5029",
"url": "https://pkg.go.dev/vuln/GO-2026-5029"
}
],
"release_date": "2026-05-22T15:01:21.975000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "To mitigate this flaw, applications processing untrusted HTML input must implement strict input sanitization and ensure all output is properly encoded before rendering. Deploying a comprehensive Content Security Policy (CSP) can restrict script execution, further reducing the attack surface. Administrators should review application configurations to ensure adequate protection against XSS.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting"
},
{
"cve": "CVE-2026-27136",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:00:56.609820+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480757"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in `golang.org/x/net/html` is rated as Important. It allows for Cross-Site Scripting (XSS) attacks by enabling an attacker to bypass HTML sanitization mechanisms when arbitrary HTML is parsed and rendered. This can lead to information disclosure or arbitrary code execution in affected applications. Exploitation typically requires user interaction, where a user processes specially crafted malicious HTML content.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "RHBZ#2480757",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480757"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27136",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27136"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://go.dev/cl/781685",
"url": "https://go.dev/cl/781685"
},
{
"category": "external",
"summary": "https://go.dev/issue/79575",
"url": "https://go.dev/issue/79575"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5030",
"url": "https://pkg.go.dev/vuln/GO-2026-5030"
}
],
"release_date": "2026-05-22T15:01:22.111000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-39828",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:46.775641+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480687"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important security flaw in the `golang.org/x/crypto/ssh` library. When an SSH server utilizing this library is configured with specific authentication callbacks that return a `PartialSuccessError` with non-nil permissions, an attacker could bypass intended certificate restrictions, such as `force-command`. This bypass could lead to unauthorized command execution or access on affected Red Hat systems configured with multi-factor authentication and certificate-based access controls.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "RHBZ#2480687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480687"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39828",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39828"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://go.dev/cl/781621",
"url": "https://go.dev/cl/781621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79562",
"url": "https://go.dev/issue/79562"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5014",
"url": "https://pkg.go.dev/vuln/GO-2026-5014"
}
],
"release_date": "2026-05-22T02:31:26.883000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions"
},
{
"cve": "CVE-2026-39829",
"cwe": {
"id": "CWE-1284",
"name": "Improper Validation of Specified Quantity in Input"
},
"discovery_date": "2026-05-22T04:01:30.092249+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480681"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in golang.org/x/crypto/ssh is rated as Important. An unauthenticated remote attacker could trigger a denial of service by providing a specially crafted public key with excessively large parameters during SSH public key authentication. This could lead to prolonged CPU consumption on the server, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "RHBZ#2480681",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480681"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39829",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39829"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://go.dev/cl/781641",
"url": "https://go.dev/cl/781641"
},
{
"category": "external",
"summary": "https://go.dev/cl/781661",
"url": "https://go.dev/cl/781661"
},
{
"category": "external",
"summary": "https://go.dev/issue/79565",
"url": "https://go.dev/issue/79565"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5018",
"url": "https://pkg.go.dev/vuln/GO-2026-5018"
}
],
"release_date": "2026-05-22T02:31:27.324000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters"
},
{
"cve": "CVE-2026-39830",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2026-05-22T04:01:38.517202+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection\u0027s read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh`. A remote, unauthenticated attacker can exploit this vulnerability by sending unsolicited global request responses to an affected SSH server, leading to resource exhaustion and a denial of service. The impact is considered Important due to the potential for unauthenticated remote disruption of services utilizing the vulnerable SSH library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "RHBZ#2480684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39830",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39830"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://go.dev/cl/781640",
"url": "https://go.dev/cl/781640"
},
{
"category": "external",
"summary": "https://go.dev/cl/781664",
"url": "https://go.dev/cl/781664"
},
{
"category": "external",
"summary": "https://go.dev/issue/79564",
"url": "https://go.dev/issue/79564"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5017",
"url": "https://pkg.go.dev/vuln/GO-2026-5017"
}
],
"release_date": "2026-05-22T02:31:27.208000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "To mitigate this denial of service vulnerability, restrict network access to any service that utilizes the `golang.org/x/crypto/ssh` library and is exposed to untrusted networks. Implement firewall rules to allow connections only from trusted hosts or networks. This action limits the ability of malicious peers to send unsolicited global request responses. A restart of the affected service may be necessary for the new network rules to be applied effectively.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses"
},
{
"cve": "CVE-2026-39835",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-05-22T04:01:27.279943+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480680"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh` affecting SSH servers that utilize `CertChecker` as a public key callback without explicitly configuring `IsUserAuthority` or `IsHostAuthority`. A remote, unauthenticated attacker can trigger a server panic by presenting a specially crafted certificate, leading to service disruption. Exploitation requires a specific, non-default configuration of the `CertChecker`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "RHBZ#2480680",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480680"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39835",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39835"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://go.dev/cl/781660",
"url": "https://go.dev/cl/781660"
},
{
"category": "external",
"summary": "https://go.dev/issue/79563",
"url": "https://go.dev/issue/79563"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5015",
"url": "https://pkg.go.dev/vuln/GO-2026-5015"
}
],
"release_date": "2026-05-22T02:31:26.982000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate"
},
{
"cve": "CVE-2026-42504",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-06-02T23:01:00.320527+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484204"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Golang MIME (Multipurpose Internet Mail Extensions) package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is rated as an Important severity flaw. A remote attacker could trigger a Denial of Service by sending a crafted MIME header with numerous invalid encoded-words to an application utilizing the affected Golang MIME package. This could lead to excessive CPU consumption on the system processing the malformed header, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42504"
},
{
"category": "external",
"summary": "RHBZ#2484204",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484204"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42504",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42504"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42504",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42504"
},
{
"category": "external",
"summary": "https://go.dev/cl/774481",
"url": "https://go.dev/cl/774481"
},
{
"category": "external",
"summary": "https://go.dev/issue/79217",
"url": "https://go.dev/issue/79217"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5038",
"url": "https://pkg.go.dev/vuln/GO-2026-5038"
}
],
"release_date": "2026-06-02T22:01:37.219000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "To mitigate this issue, restrict network access to services that process MIME headers from untrusted sources. Implement input validation and sanitization for all incoming data, especially MIME headers, to prevent maliciously crafted content from being processed by applications utilizing the vulnerable Golang MIME package.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header"
},
{
"cve": "CVE-2026-44249",
"cwe": {
"id": "CWE-1287",
"name": "Improper Validation of Specified Type of Input"
},
"discovery_date": "2026-06-11T22:02:05.327173+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488081"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in netty-handler, a component of the Netty network application framework. A remote attacker can exploit an incorrect masking operation in the IpSubnetFilterRule.compareTo() function to bypass configured IPv6 subnet rules. This allows valid public IP addresses to circumvent intended network restrictions, potentially leading to unauthorized access or exposure of services.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "netty-handler: netty-handler: IPv6 subnet rule bypass due to incorrect masking operation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in netty-handler is rated as Important because a remote attacker can bypass configured IPv6 subnet filtering rules. This flaw, stemming from an incorrect masking operation, could allow unauthorized access to or exposure of services that are intended to be network-restricted within Red Hat products utilizing the affected Netty component.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44249"
},
{
"category": "external",
"summary": "RHBZ#2488081",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488081"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44249",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44249"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44249",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44249"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-3qp7-7mw8-wx86",
"url": "https://github.com/netty/netty/security/advisories/GHSA-3qp7-7mw8-wx86"
}
],
"release_date": "2026-06-11T20:46:14.110000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "netty-handler: netty-handler: IPv6 subnet rule bypass due to incorrect masking operation"
},
{
"cve": "CVE-2026-44290",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-05-13T16:03:39.540492+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477100"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in protobufjs. This vulnerability allows an attacker to craft a protobuf schema or JSON descriptor that, when processed, can traverse through inherited object properties. This can lead to writing to global JavaScript constructors, corrupting process-wide built-in functionality. The most significant impact is a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "protobufjs: protobufjs: Denial of Service via crafted schema",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in protobufjs. A remote attacker could provide a specially crafted protobuf schema or JSON descriptor, which, when processed by an application using protobufjs, could corrupt process-wide built-in functionality, leading to a persistent denial of service. This impact is contingent on the application parsing untrusted schemas or descriptors.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44290"
},
{
"category": "external",
"summary": "RHBZ#2477100",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477100"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44290",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44290"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44290",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44290"
},
{
"category": "external",
"summary": "https://github.com/protobufjs/protobuf.js/security/advisories/GHSA-jvwf-75h9-cwgg",
"url": "https://github.com/protobufjs/protobuf.js/security/advisories/GHSA-jvwf-75h9-cwgg"
}
],
"release_date": "2026-05-13T14:41:15.312000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "To mitigate this issue, Red Hat recommends configuring applications to avoid parsing or loading protobuf schemas or JSON descriptors from untrusted sources. If processing untrusted schemas is unavoidable, implement strict validation to reject option names containing unsafe property path components before loading them. Additionally, consider running schema processing in an isolated environment to limit the blast radius of potential corruption.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "protobufjs: protobufjs: Denial of Service via crafted schema"
},
{
"cve": "CVE-2026-44291",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2026-05-13T16:04:13.828371+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477111"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in protobufjs, a library that compiles protobuf definitions into JavaScript functions. This prototype pollution vulnerability occurs when `Object.prototype` is polluted, allowing attacker-controlled properties to be resolved as valid protobuf type information. This can lead to attacker-controlled strings being emitted into generated JavaScript code, potentially resulting in arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "protobufjs: protobufjs: Arbitrary Code Execution via prototype pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in protobufjs, a JavaScript library, potentially enables arbitrary code execution when a separate prototype pollution vulnerability is present in an application. Exploitation requires an attacker to first pollute `Object.prototype` and then trigger protobufjs functionality that generates encode or decode code for affected types. Red Hat products utilizing `protobufjs` may be impacted if they are vulnerable to prototype pollution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44291"
},
{
"category": "external",
"summary": "RHBZ#2477111",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477111"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44291",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44291"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44291",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44291"
},
{
"category": "external",
"summary": "https://github.com/protobufjs/protobuf.js/security/advisories/GHSA-75px-5xx7-5xc7",
"url": "https://github.com/protobufjs/protobuf.js/security/advisories/GHSA-75px-5xx7-5xc7"
}
],
"release_date": "2026-05-13T14:42:13.984000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "Mitigation involves preventing prototype pollution within applications that utilize protobufjs. Administrators should ensure that untrusted input cannot pollute `Object.prototype` in the application or its dependencies. Additionally, isolating schema and message processing from untrusted application states can prevent attacker-controlled properties from being resolved as valid protobuf type information.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "protobufjs: protobufjs: Arbitrary Code Execution via prototype pollution"
},
{
"cve": "CVE-2026-44292",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-05-13T16:03:03.431568+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477088"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in protobufjs, a library that compiles protobuf definitions into JavaScript functions. This vulnerability allows an attacker to manipulate the internal structure of message objects. By providing a specially crafted input, an attacker could alter the prototype of individual message instances, potentially leading to unauthorized modification of data or unexpected application behavior, thereby impacting data integrity.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "protobufjs: protobufjs: Data integrity impact due to prototype pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important vulnerability where `protobufjs` can be exploited for prototype pollution on individual message instances. Applications that construct `protobufjs` messages from attacker-controlled plain objects, particularly those parsing untrusted JSON input, are susceptible to data integrity issues through manipulation of the object\u0027s prototype chain. This does not affect global prototypes but can lead to unexpected application behavior.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44292"
},
{
"category": "external",
"summary": "RHBZ#2477088",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477088"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44292",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44292"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44292",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44292"
},
{
"category": "external",
"summary": "https://github.com/protobufjs/protobuf.js/security/advisories/GHSA-fx83-v9x8-x52w",
"url": "https://github.com/protobufjs/protobuf.js/security/advisories/GHSA-fx83-v9x8-x52w"
}
],
"release_date": "2026-05-13T14:42:55.155000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications should avoid directly passing attacker-controlled plain objects to protobufjs message constructors. If processing untrusted JSON input, it is crucial to validate or sanitize object keys and explicitly reject any `__proto__` properties before constructing protobuf messages. This operational control prevents the manipulation of message instance prototypes.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "protobufjs: protobufjs: Data integrity impact due to prototype pollution"
},
{
"cve": "CVE-2026-44893",
"cwe": {
"id": "CWE-805",
"name": "Buffer Access with Incorrect Length Value"
},
"discovery_date": "2026-06-12T15:01:18.066312+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488383"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in netty-codec-haproxy, a component of the Netty network application framework. A remote attacker can exploit this vulnerability by sending a specially crafted HAProxy message with a malformed PP2_TYPE_SSL TLV (Type-Length-Value) header. This can lead to an IndexOutOfBoundsException and prevent the release of retained memory, ultimately causing a Denial of Service (DoS) condition for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "netty-codec-haproxy: Netty-codec-haproxy: Denial of Service via malformed HAProxy message",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw is rated as Important because a remote, unauthenticated attacker can trigger a denial of service in applications utilizing `netty-codec-haproxy`. By sending a specially crafted HAProxy message with a malformed SSL TLV header, an attacker can cause an `IndexOutOfBoundsException`, leading to unreleased memory and resource exhaustion. This can render the affected application unresponsive.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44893"
},
{
"category": "external",
"summary": "RHBZ#2488383",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488383"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44893",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44893"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44893",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44893"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-cc37-9q2j-3hfv",
"url": "https://github.com/netty/netty/security/advisories/GHSA-cc37-9q2j-3hfv"
}
],
"release_date": "2026-06-12T14:00:25.801000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "netty-codec-haproxy: Netty-codec-haproxy: Denial of Service via malformed HAProxy message"
},
{
"cve": "CVE-2026-45416",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-12T15:01:45.671884+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488391"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Netty, a network application framework. A remote attacker can exploit this vulnerability by sending a crafted TLS (Transport Layer Security) ClientHello message. This can lead to an eager allocation of a large memory buffer, causing a Denial of Service (DoS) due to excessive memory consumption. The issue occurs in the `SslClientHelloHandler.decode()` method when processing the TLS handshake length.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "netty-handler: Netty: Denial of Service due to eager buffer allocation in TLS handshake",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in Netty is rated as Important. It allows a remote attacker to trigger a denial of service by sending a specially crafted TLS ClientHello message. The flaw arises from an eager, unbounded memory allocation during the TLS handshake, particularly when default configurations disable the maximum client hello length guard, leading to excessive resource consumption in affected Red Hat products utilizing Netty.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45416"
},
{
"category": "external",
"summary": "RHBZ#2488391",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488391"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45416",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45416"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45416",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45416"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-x4gw-5cx5-pgmh",
"url": "https://github.com/netty/netty/security/advisories/GHSA-x4gw-5cx5-pgmh"
}
],
"release_date": "2026-06-12T14:10:05.585000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "To mitigate this issue, configure applications utilizing Netty\u0027s `SslClientHelloHandler` to specify a non-zero value for the `maxClientHelloLength` parameter. This will enable the internal length validation, preventing the eager allocation of large memory buffers when processing crafted TLS ClientHello messages. Refer to your specific application\u0027s documentation for details on configuring Netty\u0027s TLS handler. A restart of the affected application or service is required for the configuration changes to take effect.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "netty-handler: Netty: Denial of Service due to eager buffer allocation in TLS handshake"
},
{
"cve": "CVE-2026-45674",
"cwe": {
"id": "CWE-346",
"name": "Origin Validation Error"
},
"discovery_date": "2026-06-12T15:02:15.565158+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488400"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Netty\u0027s DnsResolveContext. This vulnerability allows a remote attacker to achieve information disclosure or data manipulation by crafting malicious DNS responses. The flaw occurs because the DnsResolveContext fails to validate the origin (bailiwick) of CNAME records in DNS responses, which could enable an attacker to redirect network traffic or intercept sensitive data from affected applications.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "netty-resolver-dns: Netty: Information disclosure and data manipulation due to improper CNAME record validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important severity flaw in Netty\u0027s DnsResolveContext allows a remote attacker to achieve information disclosure or data manipulation. By crafting malicious DNS responses, an attacker could redirect network traffic or intercept sensitive data, impacting applications utilizing Netty for DNS resolution in Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45674"
},
{
"category": "external",
"summary": "RHBZ#2488400",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488400"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45674",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45674"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45674",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45674"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-676x-f7gg-47vc",
"url": "https://github.com/netty/netty/security/advisories/GHSA-676x-f7gg-47vc"
}
],
"release_date": "2026-06-12T14:17:50.203000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "netty-resolver-dns: Netty: Information disclosure and data manipulation due to improper CNAME record validation"
},
{
"cve": "CVE-2026-45736",
"cwe": {
"id": "CWE-824",
"name": "Access of Uninitialized Pointer"
},
"discovery_date": "2026-05-15T16:00:55.786944+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477914"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ws, an open source WebSocket client and server for Node.js. The `websocket.close()` implementation is vulnerable to uninitialized memory disclosure when a `TypedArray` is passed as the reason argument. This can lead to the disclosure of sensitive information from uninitialized memory.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ws: ws: Uninitialized memory disclosure via `websocket.close()` with `TypedArray`",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in the `ws` WebSocket library for Node.js could lead to sensitive information disclosure. The flaw occurs when a `TypedArray` is specifically provided as the `reason` argument to the `websocket.close()` function, potentially exposing uninitialized memory. Red Hat products utilizing this library may be affected if their implementations allow for such a crafted `close()` call.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45736"
},
{
"category": "external",
"summary": "RHBZ#2477914",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477914"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45736",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45736"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45736",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45736"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/c0327ec15a54d701eb6ccefaa8bef328cfc03086",
"url": "https://github.com/websockets/ws/commit/c0327ec15a54d701eb6ccefaa8bef328cfc03086"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/security/advisories/GHSA-58qx-3vcg-4xpx",
"url": "https://github.com/websockets/ws/security/advisories/GHSA-58qx-3vcg-4xpx"
}
],
"release_date": "2026-05-15T14:53:57.263000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ws: ws: Uninitialized memory disclosure via `websocket.close()` with `TypedArray`"
},
{
"cve": "CVE-2026-45740",
"cwe": {
"id": "CWE-776",
"name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
},
"discovery_date": "2026-05-13T16:02:41.729478+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477081"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in protobufjs. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by providing a crafted JSON descriptor with deeply nested namespace definitions. This can lead to the exhaustion of the JavaScript call stack during descriptor loading, making the application unresponsive.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "protobufjs: protobufjs: Denial of Service via crafted JSON descriptors",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in protobufjs, which could allow a remote attacker to exhaust the JavaScript call stack by providing a specially crafted JSON descriptor with deeply nested namespace definitions. This vulnerability impacts Red Hat products that utilize protobufjs for processing protobuf definitions potentially leading to application unresponsiveness.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45740"
},
{
"category": "external",
"summary": "RHBZ#2477081",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477081"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45740",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45740"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45740",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45740"
},
{
"category": "external",
"summary": "https://github.com/protobufjs/protobuf.js/security/advisories/GHSA-jggg-4jg4-v7c6",
"url": "https://github.com/protobufjs/protobuf.js/security/advisories/GHSA-jggg-4jg4-v7c6"
}
],
"release_date": "2026-05-13T14:46:02.689000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "To mitigate this issue, avoid loading untrusted protobuf JSON descriptors in applications utilizing protobufjs. If untrusted descriptors must be processed, implement validation at an outer boundary to reject excessively nested structures. Alternatively, isolate the descriptor loading process in an environment that can be safely restarted in case of a denial of service.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "protobufjs: protobufjs: Denial of Service via crafted JSON descriptors"
},
{
"cve": "CVE-2026-46384",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2026-05-29T21:02:03.061736+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2483482"
}
],
"notes": [
{
"category": "description",
"text": "An integer overflow flaw was found in Go Avro in decoding logic. Multiple decoder paths performs unsafe integer conversions and overflow-prone arithmetic operations on attacker-controlled values from Avro payloads. A remote attacker during Avro decoder operations could exploit this issue using specially crafted Avro data to consume excessive resources by bypassing memory limits and triggering crashes leading to a denial of service in affected applications.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/hamba/avro/v2: github.com/linkedin/goavro/v2: Integer Overflow in Avro Decoder",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability affects multiple Avro decoder code paths in affected Go Avro libraries. Red Hat Product Security has assessed this issue as an Important severity vulnerability.\n\nA remote unauthenticated attacker may supply specially crafted Avro payloads containing malformed or excessively large integer values that trigger unsafe integer truncation, arithmetic overflow conditions, or invalid memory allocation operations during decoding.\n\nThe vulnerability affects both 32-bit specific integer narrowing paths and several cross-platform arithmetic overflow conditions. There is only a denial-of-service impact but not confidentiality or integrity impact. Therefore, Red Hat assessed the impact as limited to Availability (A:H).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46384"
},
{
"category": "external",
"summary": "RHBZ#2483482",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2483482"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46384",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46384"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46384",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46384"
},
{
"category": "external",
"summary": "https://github.com/iskorotkov/avro/security/advisories/GHSA-mc57-h6j3-3hmv",
"url": "https://github.com/iskorotkov/avro/security/advisories/GHSA-mc57-h6j3-3hmv"
}
],
"release_date": "2026-05-29T19:58:21.535000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "Red Hat is not aware of a practical temporary workaround that fully mitigates this issue or meets Red Hat Product Security\u0027s standards for usability, deployment, applicability, or stability. Customers are advised to apply the relevant security updates when they become available.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/hamba/avro/v2: github.com/linkedin/goavro/v2: Integer Overflow in Avro Decoder"
},
{
"cve": "CVE-2026-46385",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2026-05-29T21:01:37.087371+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2483475"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Avro array and map decoding logic in Go Avro. The decoder failed to properly stop processing after encountering read errors while iterating over attacker-controlled block-count values, leading to excessive resource consumption. A remote unauthenticated attacker could exploit this issue using specially crafted Avro payloads causing denial of service, where the affected system\u0027s CPU is consumed indefinitely until the process is terminated.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/hamba/avro/v2: github.com/linkedin/goavro/v2: CPU Exhaustion in Avro Decoder via Unbounded Block-Count Iteration",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability affects Avro array and map decoding functionality in affected Go Avro libraries. Red Hat Product Security has assessed this issue as an Important severity vulnerability.\n\nA remote unauthenticated attacker may supply specially crafted Avro payloads containing excessively large block-count values followed by truncated or invalid data. Because the decoder continued iterating after the underlying reader entered an error state, affected applications may consume excessive CPU resources for extended periods of time, potentially leading to denial of service.\n\nThe currently available analysis demonstrates CPU exhaustion and service disruption but does not demonstrate confidentiality or integrity impact. Therefore, Red Hat assessed the impact as limited to Availability (A:H).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46385"
},
{
"category": "external",
"summary": "RHBZ#2483475",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2483475"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46385",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46385"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46385",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46385"
},
{
"category": "external",
"summary": "https://github.com/iskorotkov/avro/security/advisories/GHSA-w8j3-pq8g-8m7w",
"url": "https://github.com/iskorotkov/avro/security/advisories/GHSA-w8j3-pq8g-8m7w"
}
],
"release_date": "2026-05-29T19:58:59.667000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "Red Hat is not aware of a practical temporary workaround that fully mitigates this issue or meets Red Hat Product Security\u0027s standards for usability, deployment, applicability, or stability. Customers are advised to apply the relevant security updates when they become available.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/hamba/avro/v2: github.com/linkedin/goavro/v2: CPU Exhaustion in Avro Decoder via Unbounded Block-Count Iteration"
},
{
"cve": "CVE-2026-46595",
"cwe": {
"id": "CWE-303",
"name": "Incorrect Implementation of Authentication Algorithm"
},
"discovery_date": "2026-05-22T04:01:52.215134+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480689"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/crypto/ssh is vulnerable to authorization bypass when SSH server configurations rely on source-address validation alongside non-public-key authentication callbacks. An attacker with low privileges who can authenticate through such a callback path may bypass intended source-address restrictions and gain unauthorized SSH access. Red Hat impact sits in services built with affected x/crypto/ssh, including RHEL golang streams, hummingbird Go toolchains, RHACM/MCE agents, and OpenShift or Ceph components that embed Go SSH servers with mixed callback types.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46595"
},
{
"category": "external",
"summary": "RHBZ#2480689",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480689"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46595",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46595"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595"
},
{
"category": "external",
"summary": "https://go.dev/cl/781642",
"url": "https://go.dev/cl/781642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79570",
"url": "https://go.dev/issue/79570"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5023",
"url": "https://pkg.go.dev/vuln/GO-2026-5023"
}
],
"release_date": "2026-05-22T02:31:27.894000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation"
},
{
"cve": "CVE-2026-46599",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-05-29T21:01:31.259450+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2483473"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `golang.org/x/image/tiff` package\u0027s TIFF decoder. This vulnerability occurs because the decoder does not properly limit the size of PackBits-compressed data. A remote attacker could exploit this by providing a maliciously-crafted image, leading to the decoder processing excessive amounts of data. This can result in a Denial of Service (DoS) due to resource exhaustion, even with a small input image.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/image/tiff: golang.org/x/image/tiff: Denial of Service via crafted PackBits-compressed data",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat rates this issue as Moderate with RH CVSS 6.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H). A flaw was found in golang.org/x/image/tiff where the TIFF decoder does not limit the size of PackBits-compressed data. A maliciously crafted TIFF image with small declared dimensions can cause the decoder to process disproportionately large amounts of compressed data, leading to resource exhaustion. Exploitation requires user interaction (opening a crafted TIFF file). Most Red Hat products that bundle golang.org/x/image do not process untrusted TIFF input in their supported execution paths.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46599"
},
{
"category": "external",
"summary": "RHBZ#2483473",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2483473"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46599",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46599"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46599",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46599"
},
{
"category": "external",
"summary": "https://go.dev/cl/759960",
"url": "https://go.dev/cl/759960"
},
{
"category": "external",
"summary": "https://go.dev/issue/79577",
"url": "https://go.dev/issue/79577"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/uhYX90BlBvI",
"url": "https://groups.google.com/g/golang-announce/c/uhYX90BlBvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5032",
"url": "https://pkg.go.dev/vuln/GO-2026-5032"
}
],
"release_date": "2026-05-29T19:35:33.539000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "Update affected Go applications to use golang.org/x/image version 0.41.0 or later, which limits the amount of compressed data the decoder will process. As a workaround, restrict accepted image formats at the application edge and reject TIFF input where it is not a required format. Applications that do not decode untrusted TIFF images are not affected.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang.org/x/image/tiff: golang.org/x/image/tiff: Denial of Service via crafted PackBits-compressed data"
},
{
"cve": "CVE-2026-46625",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-10T22:01:17.685570+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487740"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in JavaScript Cookie (js-cookie). This vulnerability allows a remote attacker to manipulate cookie attributes by exploiting a prototype pollution issue within the `assign()` helper function. When processing specially crafted JSON input, the flaw enables an attacker to hijack the prototype of a cookie\u0027s attribute object. This allows the attacker to set sensitive cookie attributes such as `domain`, `secure`, `samesite`, `expires`, and `path`, potentially leading to security bypasses or session manipulation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "js-cookie: JavaScript Cookie: Cookie attribute manipulation via prototype pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: This flaw in the `js-cookie` JavaScript library allows for cookie attribute manipulation via prototype pollution. When applications process untrusted JSON data with affected versions of `js-cookie`, an attacker could control sensitive cookie properties such as `domain` or `secure`, potentially leading to session fixation or other client-side security bypasses.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46625"
},
{
"category": "external",
"summary": "RHBZ#2487740",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487740"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46625",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46625"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46625",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46625"
},
{
"category": "external",
"summary": "https://github.com/js-cookie/js-cookie/commit/eb3c40e89731e99b8970faaf35ddad249c6c0020",
"url": "https://github.com/js-cookie/js-cookie/commit/eb3c40e89731e99b8970faaf35ddad249c6c0020"
},
{
"category": "external",
"summary": "https://github.com/js-cookie/js-cookie/releases/tag/v3.0.7",
"url": "https://github.com/js-cookie/js-cookie/releases/tag/v3.0.7"
},
{
"category": "external",
"summary": "https://github.com/js-cookie/js-cookie/security/advisories/GHSA-qjx8-664m-686j",
"url": "https://github.com/js-cookie/js-cookie/security/advisories/GHSA-qjx8-664m-686j"
}
],
"release_date": "2026-06-10T21:18:05.372000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "js-cookie: JavaScript Cookie: Cookie attribute manipulation via prototype pollution"
},
{
"cve": "CVE-2026-47691",
"cwe": {
"id": "CWE-346",
"name": "Origin Validation Error"
},
"discovery_date": "2026-06-12T16:02:45.855856+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488439"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Netty\u0027s `DnsResolveContext`. An attacker controlling an authoritative name server for a subdomain can exploit this vulnerability by providing crafted NS records that are insufficiently validated. This allows the attacker to poison the DNS cache for parent domains, bypassing standard bailiwick rules. Consequently, future DNS resolutions for the affected parent domain will use the poisoned cache, potentially redirecting users to malicious servers and leading to information disclosure or integrity compromise.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "io.netty/netty-resolver-dns: Netty has Insufficient Bailiwick Validation for NS Records",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in Netty\u0027s DNS resolution component, `netty-resolver-dns`, allows for DNS cache poisoning. An attacker with control over an authoritative name server for a subdomain could exploit this vulnerability to inject malicious DNS records into the cache of parent domains. This could lead to redirection of network traffic, impacting the integrity and availability of services relying on DNS resolution within affected Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-47691"
},
{
"category": "external",
"summary": "RHBZ#2488439",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488439"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-47691",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47691"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-47691",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47691"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-5pvg-856g-cp85",
"url": "https://github.com/netty/netty/security/advisories/GHSA-5pvg-856g-cp85"
}
],
"release_date": "2026-06-12T14:33:16.595000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "io.netty/netty-resolver-dns: Netty has Insufficient Bailiwick Validation for NS Records"
},
{
"cve": "CVE-2026-48043",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2026-06-12T16:02:56.371830+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488442"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in netty-codec-http2. A remote attacker could send specially crafted frames that cause a resource leak within the `DelegatingDecompressorFrameListener` class. This resource leak could lead to an Out Of Memory Error (OOME), potentially causing a Denial of Service (DoS) by taking down the entire Java Virtual Machine (JVM).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "netty-codec-http2: netty-codec-http2: Denial of Service due to resource leak",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in netty-codec-http2, affecting Red Hat products that utilize HTTP/2 communication with decompression. A remote attacker can exploit a resource leak in the `DelegatingDecompressorFrameListener` by sending malformed HTTP/2 frames, potentially leading to an Out Of Memory Error and causing the Java Virtual Machine to terminate. This could disrupt service availability in affected deployments.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-48043"
},
{
"category": "external",
"summary": "RHBZ#2488442",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488442"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-48043",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48043"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-48043",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48043"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-c2gf-v879-257j",
"url": "https://github.com/netty/netty/security/advisories/GHSA-c2gf-v879-257j"
}
],
"release_date": "2026-06-12T14:39:52.498000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "netty-codec-http2: netty-codec-http2: Denial of Service due to resource leak"
},
{
"cve": "CVE-2026-48059",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"discovery_date": "2026-06-12T16:02:40.032749+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488437"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Netty HAProxy PROXY protocol v2 codec. A remote attacker can exploit this vulnerability by sending a specially crafted HAProxy PROXY protocol v2 header with nested `PP2_TYPE_SSL` type-length-value (TLV) records. This can lead to a memory leak, causing the underlying cumulation buffer to remain permanently pinned and potentially resulting in a Denial of Service (DoS) due to resource exhaustion.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "netty-codec-haproxy: Netty HAProxy PROXY protocol v2 codec: Denial of Service via memory leak from crafted PROXY protocol headers",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in the Netty HAProxy PROXY protocol v2 codec, which can lead to a denial of service. A remote attacker can trigger a memory leak by sending a specially crafted HAProxy PROXY protocol v2 header with deeply nested SSL TLV records, causing resource exhaustion in affected Red Hat products that utilize this codec.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-48059"
},
{
"category": "external",
"summary": "RHBZ#2488437",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488437"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-48059",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48059"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-48059",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48059"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-h2qv-fj59-j46j",
"url": "https://github.com/netty/netty/security/advisories/GHSA-h2qv-fj59-j46j"
}
],
"release_date": "2026-06-12T14:42:44.677000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "netty-codec-haproxy: Netty HAProxy PROXY protocol v2 codec: Denial of Service via memory leak from crafted PROXY protocol headers"
},
{
"cve": "CVE-2026-48779",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-06-16T22:01:24.571224+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2489661"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ws, an open source WebSocket client and server. A remote attacker can exploit this memory exhaustion vulnerability by sending a high volume of exceptionally small fragments and data chunks. This action forces the affected component to allocate and hold structural wrappers that consume excessive memory. Consequently, this leads to process termination and a denial of service (DoS) for the remote peer.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `ws` WebSocket library. A remote attacker can exploit this flaw by sending a high volume of small, fragmented data, leading to excessive memory consumption and subsequent process termination. This can result in service disruption for Red Hat products that utilize `ws` for WebSocket communication.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-48779"
},
{
"category": "external",
"summary": "RHBZ#2489661",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2489661"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-48779",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48779"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-48779",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48779"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/86d3e8a5fb0246ed373860c5fbb0de88824a27f7",
"url": "https://github.com/websockets/ws/commit/86d3e8a5fb0246ed373860c5fbb0de88824a27f7"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/b5372ac67bb97a773727b8e9f5035a8123556d53",
"url": "https://github.com/websockets/ws/commit/b5372ac67bb97a773727b8e9f5035a8123556d53"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/bca91adf15677e47dbe4f959653452727be28b94",
"url": "https://github.com/websockets/ws/commit/bca91adf15677e47dbe4f959653452727be28b94"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/fd36cd864fcdf62a08273a99e19a7d975401fee8",
"url": "https://github.com/websockets/ws/commit/fd36cd864fcdf62a08273a99e19a7d975401fee8"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/security/advisories/GHSA-96hv-2xvq-fx4p",
"url": "https://github.com/websockets/ws/security/advisories/GHSA-96hv-2xvq-fx4p"
}
],
"release_date": "2026-06-16T21:26:22.537000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments"
},
{
"cve": "CVE-2026-50010",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-06-12T16:02:13.735675+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488429"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Netty, a network application framework. This vulnerability allows a remote attacker to bypass hostname verification due to improper handling of user-supplied trust managers. When a client is configured with a plain X.509 Trust Manager (X509TrustManager), it fails to perform necessary hostname checks, enabling an attacker to impersonate a legitimate server. This could lead to sensitive information disclosure or man-in-the-middle attacks.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "netty-handler: Netty: Improper trust manager handling leads to hostname verification bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in Netty that affects Red Hat products utilizing the `netty-handler` component, including various Red Hat AMQ, Enterprise Application Platform, and OpenShift offerings. The vulnerability arises when a Netty client is configured with a plain X.509 Trust Manager, leading to a bypass of hostname verification. This oversight allows a remote attacker to perform man-in-the-middle attacks by impersonating a legitimate server, potentially compromising sensitive data.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-50010"
},
{
"category": "external",
"summary": "RHBZ#2488429",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488429"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-50010",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50010"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-50010",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-50010"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-c653-97m9-rcg9",
"url": "https://github.com/netty/netty/security/advisories/GHSA-c653-97m9-rcg9"
}
],
"release_date": "2026-06-12T14:50:43.151000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "netty-handler: Netty: Improper trust manager handling leads to hostname verification bypass"
},
{
"cve": "CVE-2026-50559",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-06-09T10:55:32.426000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2486959"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Quarkus. A remote attacker could bypass HTTP path-based authorization policies by using specially crafted encoded semicolons, slashes, or backslashes in HTTP requests. This could allow unauthorized access to protected static resources, leading to information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "io.quarkus/quarkus-vertx-http: Quarkus: Authorization bypass in HTTP path-based policies via encoded characters",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in Quarkus where HTTP path-based authorization policies can be bypassed by a remote attacker. Specially crafted HTTP requests containing encoded semicolons, slashes, or backslashes can circumvent security controls, allowing unauthorized access to protected static resources and leading to information disclosure. This is critical in deployments where Quarkus applications serve sensitive static content and rely solely on path-based authorization.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-50559"
},
{
"category": "external",
"summary": "RHBZ#2486959",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2486959"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-50559",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50559"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-50559",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-50559"
},
{
"category": "external",
"summary": "https://github.com/quarkusio/quarkus/security/advisories/GHSA-qcxp-gm7m-4j5v",
"url": "https://github.com/quarkusio/quarkus/security/advisories/GHSA-qcxp-gm7m-4j5v"
}
],
"release_date": "2026-06-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "io.quarkus/quarkus-vertx-http: Quarkus: Authorization bypass in HTTP path-based policies via encoded characters"
},
{
"cve": "CVE-2026-54512",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"discovery_date": "2026-06-23T22:01:49.821346+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2492015"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in jackson-databind. This vulnerability allows a remote attacker to bypass the PolymorphicTypeValidator (PTV) when polymorphic typing is enabled and a type identifier contains generic parameters. By crafting a malicious type ID, an attacker can place a denied class as a generic type parameter of an allowed container. This leads to the loading and instantiation of arbitrary classes, potentially resulting in arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in `jackson-databind` is rated as Important. While it describes a potential bypass of the PolymorphicTypeValidator leading to arbitrary code execution, exploitation requires an attacker to already possess administrative privileges, specifically the `manage-realm` role. This flaw does not enable privilege escalation, as it does not grant additional capabilities beyond those inherently available to an existing administrator.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-54512"
},
{
"category": "external",
"summary": "RHBZ#2492015",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2492015"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-54512",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54512"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-54512",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-54512"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-databind/commit/434d6c511de7fdd9872f29157aafb6162d12d8d5",
"url": "https://github.com/FasterXML/jackson-databind/commit/434d6c511de7fdd9872f29157aafb6162d12d8d5"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-databind/issues/5988",
"url": "https://github.com/FasterXML/jackson-databind/issues/5988"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-j3rv-43j4-c7qm",
"url": "https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-j3rv-43j4-c7qm"
}
],
"release_date": "2026-06-23T20:56:36.646000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass"
},
{
"cve": "CVE-2026-54513",
"cwe": {
"id": "CWE-184",
"name": "Incomplete List of Disallowed Inputs"
},
"discovery_date": "2026-06-23T22:01:34.437620+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2492010"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in jackson-databind, a library used for processing data. This vulnerability allows an attacker to bypass security controls designed to validate data types. By sending specially crafted input, an attacker can force the system to process untrusted data, which may lead to the execution of malicious code. This could result in a complete compromise of the affected system, impacting its confidentiality, integrity, and availability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in `jackson-databind` allows for a security bypass, enabling arbitrary code execution. The vulnerability arises from insufficient validation of array component types by `BasicPolymorphicTypeValidator`, which permits deserialization of unallowlisted types when processing untrusted input. This bypass of type validation can lead to a complete system compromise, affecting confidentiality, integrity, and availability in Red Hat products utilizing `jackson-databind` for data processing.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-54513"
},
{
"category": "external",
"summary": "RHBZ#2492010",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2492010"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-54513",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54513"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-54513",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-54513"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-databind/commit/01d1692c8d0ed03e51a0e3c4f8a9e6908e4931e5",
"url": "https://github.com/FasterXML/jackson-databind/commit/01d1692c8d0ed03e51a0e3c4f8a9e6908e4931e5"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-databind/commit/24529da29fdf46ff94ca38de9ebf31cd188f5e8e",
"url": "https://github.com/FasterXML/jackson-databind/commit/24529da29fdf46ff94ca38de9ebf31cd188f5e8e"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-databind/issues/5981",
"url": "https://github.com/FasterXML/jackson-databind/issues/5981"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-databind/issues/5983",
"url": "https://github.com/FasterXML/jackson-databind/issues/5983"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-databind/pull/5984",
"url": "https://github.com/FasterXML/jackson-databind/pull/5984"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-rmj7-2vxq-3g9f",
"url": "https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-rmj7-2vxq-3g9f"
}
],
"release_date": "2026-06-23T20:53:52.543000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "Upgrade to version 2.18.8, 2.21.4, or 3.1.4 or later to address this vulnerability. If upgrading is not immediately possible, remove BasicPolymorphicTypeValidator.Builder.allowIfSubTypeIsArray() from the application\u2019s ObjectMapper configuration to eliminate the affected deserialization path. Rebuild and restart the application to apply the configuration change.\n\nAs an additional mitigation, disable polymorphic deserialization of untrusted data where possible by avoiding or removing default typing features such as activateDefaultTyping() or enableDefaultTyping(). When polymorphic deserialization is required, restrict allowed subtypes using a strict whitelist of trusted application packages and avoid broad or permissive type validation rules.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution"
}
]
}
RHSA-2026:48771
Vulnerability from csaf_redhat - Published: 2026-07-30 13:15 - Updated: 2026-08-26 04:26Summary
Red Hat Security Advisory: RHTAS 1.4.3 - CLI Stack Release
Severity
Important
Notes
Topic: The 1.4.3 release of the RHTAS CLIs.
For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4
Details: The RHTAS CLI Stack images for RHTAS 1.4.3
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.
8.8 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection's read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.
8.7 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/agent. The NewKeyring() function, which creates an in-memory keyring, failed to enforce the ConfirmBeforeUse constraint on keys. This allowed keys configured to require user confirmation before use to perform signing operations without any prompt or indication to the user. Consequently, an attacker could potentially bypass intended security controls, leading to unauthorized cryptographic signing actions.
5.5 (Medium)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Threats
Impact
Important
A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.
7.4 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.
7.1 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Threats
Impact
Important
References
126 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "The 1.4.3 release of the RHTAS CLIs.\nFor more details please visit the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4",
"title": "Topic"
},
{
"category": "general",
"text": "The RHTAS CLI Stack images for RHTAS 1.4.3",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:48771",
"url": "https://access.redhat.com/errata/RHSA-2026:48771"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4",
"url": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"url": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27145",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33811",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39820",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39828",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39829",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39830",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39832",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39833",
"url": "https://access.redhat.com/security/cve/CVE-2026-39833"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39835",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42151",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42499",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42508",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46595",
"url": "https://access.redhat.com/security/cve/CVE-2026-46595"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_48771.json"
}
],
"title": "Red Hat Security Advisory: RHTAS 1.4.3 - CLI Stack Release",
"tracking": {
"current_release_date": "2026-08-26T04:26:29+00:00",
"generator": {
"date": "2026-08-26T04:26:29+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:48771",
"initial_release_date": "2026-07-30T13:15:29+00:00",
"revision_history": [
{
"date": "2026-07-30T13:15:29+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-22T06:15:42+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-26T04:26:29+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Trusted Artifact Signer 1.4",
"product": {
"name": "Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:trusted_artifact_signer:1.4::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Trusted Artifact Signer"
},
{
"branches": [
{
"category": "product_version",
"name": "conforma-cli-stack-v1-4@amd64_darwin",
"product": {
"name": "conforma-cli-stack-v1-4@amd64_darwin",
"product_id": "conforma-cli-stack-v1-4@amd64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/conforma-cli-stack-v1-4@1.4.3?filename=ec_darwin_amd64.tar.gz\u0026checksum=sha256:ba0319fcf14ce9af09aea60ac6ded7493fcc3805d657ab3cafcccce258cdbc24\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "cosign-cli-stack-v1-4@amd64_darwin",
"product": {
"name": "cosign-cli-stack-v1-4@amd64_darwin",
"product_id": "cosign-cli-stack-v1-4@amd64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/cosign-cli-stack-v1-4@1.4.3?filename=cosign_darwin_amd64.tar.gz\u0026checksum=sha256:89fe2f185b14bb9cf8cd5fdc2997b11b6a3d6e344c29d9bfb0c6678fc4e789d2\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"product": {
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"product_id": "fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/fetch-tsa-certs-cli-stack-v1-4@1.4.3?filename=fetch_tsa_certs_darwin_amd64.tar.gz\u0026checksum=sha256:8e144593f7988904a732c9b2984b426a5a0656d054ae2bc4d990721814437c6a\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "gitsign-cli-stack-v1-4@amd64_darwin",
"product": {
"name": "gitsign-cli-stack-v1-4@amd64_darwin",
"product_id": "gitsign-cli-stack-v1-4@amd64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/gitsign-cli-stack-v1-4@1.4.3?filename=gitsign_cli_darwin_amd64.tar.gz\u0026checksum=sha256:ddbb1fe6762a246b031d1ad6684adb4fa6ebada079242d439c4d0bb564426d09\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "model-transparency-cli-stack-v1-4@amd64_darwin",
"product": {
"name": "model-transparency-cli-stack-v1-4@amd64_darwin",
"product_id": "model-transparency-cli-stack-v1-4@amd64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/model-transparency-cli-stack-v1-4@1.4.3?filename=model_transparency_cli_darwin_amd64.tar.gz\u0026checksum=sha256:56ecfb9f0a96bf7e8912d4c7b80ff7da1bb783eb68466b38dca7206434441acb\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "rekor-cli-stack-v1-4@amd64_darwin",
"product": {
"name": "rekor-cli-stack-v1-4@amd64_darwin",
"product_id": "rekor-cli-stack-v1-4@amd64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/rekor-cli-stack-v1-4@1.4.3?filename=rekor_cli_darwin_amd64.tar.gz\u0026checksum=sha256:55c0c62a6c54e8737b2cc6cbd37a1a49be5807da1097124ed5d39173731d610e\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "trillian-cli-stack-v1-4@amd64_darwin",
"product": {
"name": "trillian-cli-stack-v1-4@amd64_darwin",
"product_id": "trillian-cli-stack-v1-4@amd64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/trillian-cli-stack-v1-4@1.4.3?filename=updatetree_darwin_amd64.tar.gz\u0026checksum=sha256:8031a91d5d2fd81e62d364a3e1a65f3cab696640a334f36eaf0de04252771358\u0026download_url=https://developers.qa.redhat.com/products"
}
}
}
],
"category": "architecture",
"name": "amd64_darwin"
},
{
"branches": [
{
"category": "product_version",
"name": "conforma-cli-stack-v1-4@arm64_darwin",
"product": {
"name": "conforma-cli-stack-v1-4@arm64_darwin",
"product_id": "conforma-cli-stack-v1-4@arm64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/conforma-cli-stack-v1-4@1.4.3?filename=ec_darwin_arm64.tar.gz\u0026checksum=sha256:f94cb68da5dd2e397443863c8306ba903277dab26bfc8bf5ae1f3d9e7a7bccf3\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "cosign-cli-stack-v1-4@arm64_darwin",
"product": {
"name": "cosign-cli-stack-v1-4@arm64_darwin",
"product_id": "cosign-cli-stack-v1-4@arm64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/cosign-cli-stack-v1-4@1.4.3?filename=cosign_darwin_arm64.tar.gz\u0026checksum=sha256:be6c8f783a6606938968a547dddffe8c860f404a21d61d0757a7e173d9a87860\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"product": {
"name": "fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"product_id": "fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/fetch-tsa-certs-cli-stack-v1-4@1.4.3?filename=fetch_tsa_certs_darwin_arm64.tar.gz\u0026checksum=sha256:5cc43b5d7aaa3829c93f21d95b9c4a27f08043cfb2b5e5b6e50fd39566def195\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "gitsign-cli-stack-v1-4@arm64_darwin",
"product": {
"name": "gitsign-cli-stack-v1-4@arm64_darwin",
"product_id": "gitsign-cli-stack-v1-4@arm64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/gitsign-cli-stack-v1-4@1.4.3?filename=gitsign_cli_darwin_arm64.tar.gz\u0026checksum=sha256:0a0667c88d39d6208f298ba84440f55e3054bc35c3dffcf86039bda233a82f89\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "model-transparency-cli-stack-v1-4@arm64_darwin",
"product": {
"name": "model-transparency-cli-stack-v1-4@arm64_darwin",
"product_id": "model-transparency-cli-stack-v1-4@arm64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/model-transparency-cli-stack-v1-4@1.4.3?filename=model_transparency_cli_darwin_arm64.tar.gz\u0026checksum=sha256:eae6ee618548fc7febb3256c8941f1a0ec829b8476e66078efd84dadff97d51f\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "rekor-cli-stack-v1-4@arm64_darwin",
"product": {
"name": "rekor-cli-stack-v1-4@arm64_darwin",
"product_id": "rekor-cli-stack-v1-4@arm64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/rekor-cli-stack-v1-4@1.4.3?filename=rekor_cli_darwin_arm64.tar.gz\u0026checksum=sha256:2e5d2e6a36d03862962cc8cbe0609f8b090f1319187763c188e268e149a211a6\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "trillian-cli-stack-v1-4@arm64_darwin",
"product": {
"name": "trillian-cli-stack-v1-4@arm64_darwin",
"product_id": "trillian-cli-stack-v1-4@arm64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/trillian-cli-stack-v1-4@1.4.3?filename=updatetree_darwin_arm64.tar.gz\u0026checksum=sha256:b90f2ec19c2e8790a31d523aa75da5d31cc223ca207c25f720e0e893ceedcb2b\u0026download_url=https://developers.qa.redhat.com/products"
}
}
}
],
"category": "architecture",
"name": "arm64_darwin"
},
{
"branches": [
{
"category": "product_version",
"name": "conforma-cli-stack-v1-4@amd64",
"product": {
"name": "conforma-cli-stack-v1-4@amd64",
"product_id": "conforma-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/conforma-cli-stack-v1-4@1.4.3?filename=ec_linux_amd64.tar.gz\u0026checksum=sha256:9d67d0f809f8576c253ac2437aa7a1eb90a65e2f28da1f5c7ee4c4fe568f2d55\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "cosign-cli-stack-v1-4@amd64",
"product": {
"name": "cosign-cli-stack-v1-4@amd64",
"product_id": "cosign-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/cosign-cli-stack-v1-4@1.4.3?filename=cosign_linux_amd64.tar.gz\u0026checksum=sha256:4a65933981e9eeb85e0a1b270411b44bde2ce3d008201a894e2af6a5440fe25c\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64",
"product": {
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64",
"product_id": "fetch-tsa-certs-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/fetch-tsa-certs-cli-stack-v1-4@1.4.3?filename=fetch_tsa_certs_linux_amd64.tar.gz\u0026checksum=sha256:dcddc1ae6817d0595ce76e65fd11a7de32706645410ff891e160a641084ad379\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "gitsign-cli-stack-v1-4@amd64",
"product": {
"name": "gitsign-cli-stack-v1-4@amd64",
"product_id": "gitsign-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/gitsign-cli-stack-v1-4@1.4.3?filename=gitsign_cli_linux_amd64.tar.gz\u0026checksum=sha256:772835071524d4670c44f48e73166118f088baf567d2019532d45c492c15c6de\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "model-transparency-cli-stack-v1-4@amd64",
"product": {
"name": "model-transparency-cli-stack-v1-4@amd64",
"product_id": "model-transparency-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/model-transparency-cli-stack-v1-4@1.4.3?filename=model_transparency_cli_pkcs11_linux_amd64.tar.gz\u0026checksum=sha256:031c0547d645585a70a99461f35ae3a77a1e30790336915c6000e7bedd971b6f\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "rekor-cli-stack-v1-4@amd64",
"product": {
"name": "rekor-cli-stack-v1-4@amd64",
"product_id": "rekor-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/rekor-cli-stack-v1-4@1.4.3?filename=rekor_cli_linux_amd64.tar.gz\u0026checksum=sha256:7dec4aff3daf64908417ca9ff5fa3822b6c41dcc63c20b832f6eb7963374b8d8\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "trillian-cli-stack-v1-4@amd64",
"product": {
"name": "trillian-cli-stack-v1-4@amd64",
"product_id": "trillian-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/trillian-cli-stack-v1-4@1.4.3?filename=updatetree_linux_amd64.tar.gz\u0026checksum=sha256:42cfc2fd535bccc2bc623c61f736483313bd0f662f21501f42e902349435d15a\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "tuftool-cli-stack-v1-4@amd64",
"product": {
"name": "tuftool-cli-stack-v1-4@amd64",
"product_id": "tuftool-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/tuftool-cli-stack-v1-4@1.4.3?filename=tuftool_linux_amd64.tar.gz\u0026checksum=sha256:5b288bfedf17b2a07486f16457b8405d34cf4081f76534b678fa7cdcd413f82b\u0026download_url=https://developers.qa.redhat.com/products"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "conforma-cli-stack-v1-4@arm64",
"product": {
"name": "conforma-cli-stack-v1-4@arm64",
"product_id": "conforma-cli-stack-v1-4@arm64",
"product_identification_helper": {
"purl": "pkg:generic/conforma-cli-stack-v1-4@1.4.3?filename=ec_linux_arm64.tar.gz\u0026checksum=sha256:d22c843c2cb8dad6b525614cddf62d20e2536260ddb9e8215a68ba34950ecda9\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "cosign-cli-stack-v1-4@arm64",
"product": {
"name": "cosign-cli-stack-v1-4@arm64",
"product_id": "cosign-cli-stack-v1-4@arm64",
"product_identification_helper": {
"purl": "pkg:generic/cosign-cli-stack-v1-4@1.4.3?filename=cosign_linux_arm64.tar.gz\u0026checksum=sha256:e8ff0ea9f5104e81d9b57b297d65c41b760556d70c98e8e21a612beb242ff731\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "fetch-tsa-certs-cli-stack-v1-4@arm64",
"product": {
"name": "fetch-tsa-certs-cli-stack-v1-4@arm64",
"product_id": "fetch-tsa-certs-cli-stack-v1-4@arm64",
"product_identification_helper": {
"purl": "pkg:generic/fetch-tsa-certs-cli-stack-v1-4@1.4.3?filename=fetch_tsa_certs_linux_arm64.tar.gz\u0026checksum=sha256:b2418f32be12f4e93c6bf993daa11243fa40f3aeafd46422b1f3badc7ca4b532\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "gitsign-cli-stack-v1-4@arm64",
"product": {
"name": "gitsign-cli-stack-v1-4@arm64",
"product_id": "gitsign-cli-stack-v1-4@arm64",
"product_identification_helper": {
"purl": "pkg:generic/gitsign-cli-stack-v1-4@1.4.3?filename=gitsign_cli_linux_arm64.tar.gz\u0026checksum=sha256:b8f320b723bb722565a78b51783bc750c28b8cc02ef6a08698e14cdb7773f0a2\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "model-transparency-cli-stack-v1-4@arm64",
"product": {
"name": "model-transparency-cli-stack-v1-4@arm64",
"product_id": "model-transparency-cli-stack-v1-4@arm64",
"product_identification_helper": {
"purl": "pkg:generic/model-transparency-cli-stack-v1-4@1.4.3?filename=model_transparency_cli_pkcs11_linux_arm64.tar.gz\u0026checksum=sha256:63182bbf957c0e156e9f695776875f7a53c9a187ceb14caae2b03b0f2ce4df43\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "rekor-cli-stack-v1-4@arm64",
"product": {
"name": "rekor-cli-stack-v1-4@arm64",
"product_id": "rekor-cli-stack-v1-4@arm64",
"product_identification_helper": {
"purl": "pkg:generic/rekor-cli-stack-v1-4@1.4.3?filename=rekor_cli_linux_arm64.tar.gz\u0026checksum=sha256:aa13a0ea35439464cf241988216a8dd2c9e40ad846e243ea9dae9b49b4a11ec3\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "trillian-cli-stack-v1-4@arm64",
"product": {
"name": "trillian-cli-stack-v1-4@arm64",
"product_id": "trillian-cli-stack-v1-4@arm64",
"product_identification_helper": {
"purl": "pkg:generic/trillian-cli-stack-v1-4@1.4.3?filename=updatetree_linux_arm64.tar.gz\u0026checksum=sha256:91d5b66c1d54c0efd257e4902a6692f51edb93e155643b8e6b50dc275c1bb048\u0026download_url=https://developers.qa.redhat.com/products"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "conforma-cli-stack-v1-4@ppc64le",
"product": {
"name": "conforma-cli-stack-v1-4@ppc64le",
"product_id": "conforma-cli-stack-v1-4@ppc64le",
"product_identification_helper": {
"purl": "pkg:generic/conforma-cli-stack-v1-4@1.4.3?filename=ec_linux_ppc64le.tar.gz\u0026checksum=sha256:18bd60a0143e998178e02fa7673105259e48fcbe9c32207a3bdc0d66daab8f8a\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "cosign-cli-stack-v1-4@ppc64le",
"product": {
"name": "cosign-cli-stack-v1-4@ppc64le",
"product_id": "cosign-cli-stack-v1-4@ppc64le",
"product_identification_helper": {
"purl": "pkg:generic/cosign-cli-stack-v1-4@1.4.3?filename=cosign_linux_ppc64le.tar.gz\u0026checksum=sha256:179353a55fe09a3031ecb6d7ea83f692eeafa948fed8df93f5a6e08fd95f9729\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"product": {
"name": "fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"product_id": "fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"product_identification_helper": {
"purl": "pkg:generic/fetch-tsa-certs-cli-stack-v1-4@1.4.3?filename=fetch_tsa_certs_linux_ppc64le.tar.gz\u0026checksum=sha256:8f906cfb20e8593cfb65aba0f64900b9897eb5ca00ef76f99b08a2192af027be\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "gitsign-cli-stack-v1-4@ppc64le",
"product": {
"name": "gitsign-cli-stack-v1-4@ppc64le",
"product_id": "gitsign-cli-stack-v1-4@ppc64le",
"product_identification_helper": {
"purl": "pkg:generic/gitsign-cli-stack-v1-4@1.4.3?filename=gitsign_cli_linux_ppc64le.tar.gz\u0026checksum=sha256:a05ff4b720561e4eae766ecd8463f56d566819505ee6d0254b01c1920dcd8af8\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "model-transparency-cli-stack-v1-4@ppc64le",
"product": {
"name": "model-transparency-cli-stack-v1-4@ppc64le",
"product_id": "model-transparency-cli-stack-v1-4@ppc64le",
"product_identification_helper": {
"purl": "pkg:generic/model-transparency-cli-stack-v1-4@1.4.3?filename=model_transparency_cli_pkcs11_linux_ppc64le.tar.gz\u0026checksum=sha256:4fc781761f359570a87defdad0e8f9992e3b84dcdf59ff72fb0ea60df210de83\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "rekor-cli-stack-v1-4@ppc64le",
"product": {
"name": "rekor-cli-stack-v1-4@ppc64le",
"product_id": "rekor-cli-stack-v1-4@ppc64le",
"product_identification_helper": {
"purl": "pkg:generic/rekor-cli-stack-v1-4@1.4.3?filename=rekor_cli_linux_ppc64le.tar.gz\u0026checksum=sha256:b36ce275d5e6735e69c51233ebac81aac6dc3f48c03ebd03ea6e548e5c4f02d7\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "trillian-cli-stack-v1-4@ppc64le",
"product": {
"name": "trillian-cli-stack-v1-4@ppc64le",
"product_id": "trillian-cli-stack-v1-4@ppc64le",
"product_identification_helper": {
"purl": "pkg:generic/trillian-cli-stack-v1-4@1.4.3?filename=updatetree_linux_ppc64le.tar.gz\u0026checksum=sha256:43e2b76086c4c7b96304da59f98dbcaedb61e8f6dfa9ad40ee3c0a9dcc70b410\u0026download_url=https://developers.qa.redhat.com/products"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "conforma-cli-stack-v1-4@s390x",
"product": {
"name": "conforma-cli-stack-v1-4@s390x",
"product_id": "conforma-cli-stack-v1-4@s390x",
"product_identification_helper": {
"purl": "pkg:generic/conforma-cli-stack-v1-4@1.4.3?filename=ec_linux_s390x.tar.gz\u0026checksum=sha256:2fe947638045e305fc2ee1a648f55e2b0e3215fe590ab3eaa0d7ac9e79544889\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "cosign-cli-stack-v1-4@s390x",
"product": {
"name": "cosign-cli-stack-v1-4@s390x",
"product_id": "cosign-cli-stack-v1-4@s390x",
"product_identification_helper": {
"purl": "pkg:generic/cosign-cli-stack-v1-4@1.4.3?filename=cosign_linux_s390x.tar.gz\u0026checksum=sha256:3681aea2d65788ba26a64e31acbb96051458b8075b1482b4f338b7ba12a6b289\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "fetch-tsa-certs-cli-stack-v1-4@s390x",
"product": {
"name": "fetch-tsa-certs-cli-stack-v1-4@s390x",
"product_id": "fetch-tsa-certs-cli-stack-v1-4@s390x",
"product_identification_helper": {
"purl": "pkg:generic/fetch-tsa-certs-cli-stack-v1-4@1.4.3?filename=fetch_tsa_certs_linux_s390x.tar.gz\u0026checksum=sha256:69498733a8e39078a9a5627a2dcfced108c0ecc7965fd2d16c25fc6e2feb3858\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "gitsign-cli-stack-v1-4@s390x",
"product": {
"name": "gitsign-cli-stack-v1-4@s390x",
"product_id": "gitsign-cli-stack-v1-4@s390x",
"product_identification_helper": {
"purl": "pkg:generic/gitsign-cli-stack-v1-4@1.4.3?filename=gitsign_cli_linux_s390x.tar.gz\u0026checksum=sha256:3e7eb54efaeb4faa1c6b5c64d5017b5afd6290f5202695bf1220acf25a2ad026\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "model-transparency-cli-stack-v1-4@s390x",
"product": {
"name": "model-transparency-cli-stack-v1-4@s390x",
"product_id": "model-transparency-cli-stack-v1-4@s390x",
"product_identification_helper": {
"purl": "pkg:generic/model-transparency-cli-stack-v1-4@1.4.3?filename=model_transparency_cli_pkcs11_linux_s390x.tar.gz\u0026checksum=sha256:a41fc6dafc44a3ef9cc45b71dcc557a4f633a3b3e13ea7672a77dd6666cfa9c8\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "rekor-cli-stack-v1-4@s390x",
"product": {
"name": "rekor-cli-stack-v1-4@s390x",
"product_id": "rekor-cli-stack-v1-4@s390x",
"product_identification_helper": {
"purl": "pkg:generic/rekor-cli-stack-v1-4@1.4.3?filename=rekor_cli_linux_s390x.tar.gz\u0026checksum=sha256:2afe6927478749fd550190111781d8ad529294bf0a7570d7059f14eb9ced52be\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "trillian-cli-stack-v1-4@s390x",
"product": {
"name": "trillian-cli-stack-v1-4@s390x",
"product_id": "trillian-cli-stack-v1-4@s390x",
"product_identification_helper": {
"purl": "pkg:generic/trillian-cli-stack-v1-4@1.4.3?filename=updatetree_linux_s390x.tar.gz\u0026checksum=sha256:6fed7506d560d15237996996a02e37f0724e904c1fd4911e12b0896823881b36\u0026download_url=https://developers.qa.redhat.com/products"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "conforma-cli-stack-v1-4@amd64_windows",
"product": {
"name": "conforma-cli-stack-v1-4@amd64_windows",
"product_id": "conforma-cli-stack-v1-4@amd64_windows",
"product_identification_helper": {
"purl": "pkg:generic/conforma-cli-stack-v1-4@1.4.3?filename=ec_windows_amd64.zip\u0026checksum=sha256:aab8df482a3af57bed8d3d5e707bad83a4df4df78dfdd1abee09f8661cc77292\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "cosign-cli-stack-v1-4@amd64_windows",
"product": {
"name": "cosign-cli-stack-v1-4@amd64_windows",
"product_id": "cosign-cli-stack-v1-4@amd64_windows",
"product_identification_helper": {
"purl": "pkg:generic/cosign-cli-stack-v1-4@1.4.3?filename=cosign_windows_amd64.zip\u0026checksum=sha256:ed5e15b31fbf8730930ca0ca372efaea8e036703dc662b0a292ff632e8a538f5\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"product": {
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"product_id": "fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"product_identification_helper": {
"purl": "pkg:generic/fetch-tsa-certs-cli-stack-v1-4@1.4.3?filename=fetch_tsa_certs_windows_amd64.zip\u0026checksum=sha256:8397786f43ddc3e272fe73880a2947eb56fb5120ce3442f7bd6b4f0ee4fb8d28\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "gitsign-cli-stack-v1-4@amd64_windows",
"product": {
"name": "gitsign-cli-stack-v1-4@amd64_windows",
"product_id": "gitsign-cli-stack-v1-4@amd64_windows",
"product_identification_helper": {
"purl": "pkg:generic/gitsign-cli-stack-v1-4@1.4.3?filename=gitsign_cli_windows_amd64.zip\u0026checksum=sha256:5163527dc7d890b6d05d66c353a67702d148c43c66aaec366dcf90e5307533dc\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "model-transparency-cli-stack-v1-4@amd64_windows",
"product": {
"name": "model-transparency-cli-stack-v1-4@amd64_windows",
"product_id": "model-transparency-cli-stack-v1-4@amd64_windows",
"product_identification_helper": {
"purl": "pkg:generic/model-transparency-cli-stack-v1-4@1.4.3?filename=model_transparency_cli_windows_amd64.exe.gz\u0026checksum=sha256:90f187d79b8dfd39cca62120fdabbfc685c9f99c7c7f16f80dbf296defef72e1\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "rekor-cli-stack-v1-4@amd64_windows",
"product": {
"name": "rekor-cli-stack-v1-4@amd64_windows",
"product_id": "rekor-cli-stack-v1-4@amd64_windows",
"product_identification_helper": {
"purl": "pkg:generic/rekor-cli-stack-v1-4@1.4.3?filename=rekor_cli_windows_amd64.zip\u0026checksum=sha256:8e1fe853c7a5594822fe91cdc62e37b2851e49bb70a89fa47c662dc6ae4ddc7c\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "trillian-cli-stack-v1-4@amd64_windows",
"product": {
"name": "trillian-cli-stack-v1-4@amd64_windows",
"product_id": "trillian-cli-stack-v1-4@amd64_windows",
"product_identification_helper": {
"purl": "pkg:generic/trillian-cli-stack-v1-4@1.4.3?filename=updatetree_windows_amd64.zip\u0026checksum=sha256:8a2bd8d3f3d2e1624e6f1a4b862c3c0d8edd17663d0b3f4625a3a0b32232f8ca\u0026download_url=https://developers.qa.redhat.com/products"
}
}
}
],
"category": "architecture",
"name": "amd64_windows"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "conforma-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64"
},
"product_reference": "conforma-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conforma-cli-stack-v1-4@amd64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin"
},
"product_reference": "conforma-cli-stack-v1-4@amd64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conforma-cli-stack-v1-4@amd64_windows as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows"
},
"product_reference": "conforma-cli-stack-v1-4@amd64_windows",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conforma-cli-stack-v1-4@arm64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64"
},
"product_reference": "conforma-cli-stack-v1-4@arm64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conforma-cli-stack-v1-4@arm64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin"
},
"product_reference": "conforma-cli-stack-v1-4@arm64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conforma-cli-stack-v1-4@ppc64le as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le"
},
"product_reference": "conforma-cli-stack-v1-4@ppc64le",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conforma-cli-stack-v1-4@s390x as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
},
"product_reference": "conforma-cli-stack-v1-4@s390x",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64"
},
"product_reference": "cosign-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-cli-stack-v1-4@amd64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin"
},
"product_reference": "cosign-cli-stack-v1-4@amd64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-cli-stack-v1-4@amd64_windows as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows"
},
"product_reference": "cosign-cli-stack-v1-4@amd64_windows",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-cli-stack-v1-4@arm64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64"
},
"product_reference": "cosign-cli-stack-v1-4@arm64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-cli-stack-v1-4@arm64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin"
},
"product_reference": "cosign-cli-stack-v1-4@arm64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-cli-stack-v1-4@ppc64le as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le"
},
"product_reference": "cosign-cli-stack-v1-4@ppc64le",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-cli-stack-v1-4@s390x as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x"
},
"product_reference": "cosign-cli-stack-v1-4@s390x",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64"
},
"product_reference": "fetch-tsa-certs-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin"
},
"product_reference": "fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64_windows as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows"
},
"product_reference": "fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fetch-tsa-certs-cli-stack-v1-4@arm64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64"
},
"product_reference": "fetch-tsa-certs-cli-stack-v1-4@arm64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fetch-tsa-certs-cli-stack-v1-4@arm64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin"
},
"product_reference": "fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fetch-tsa-certs-cli-stack-v1-4@ppc64le as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le"
},
"product_reference": "fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fetch-tsa-certs-cli-stack-v1-4@s390x as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x"
},
"product_reference": "fetch-tsa-certs-cli-stack-v1-4@s390x",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gitsign-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64"
},
"product_reference": "gitsign-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gitsign-cli-stack-v1-4@amd64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin"
},
"product_reference": "gitsign-cli-stack-v1-4@amd64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gitsign-cli-stack-v1-4@amd64_windows as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows"
},
"product_reference": "gitsign-cli-stack-v1-4@amd64_windows",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gitsign-cli-stack-v1-4@arm64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64"
},
"product_reference": "gitsign-cli-stack-v1-4@arm64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gitsign-cli-stack-v1-4@arm64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin"
},
"product_reference": "gitsign-cli-stack-v1-4@arm64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gitsign-cli-stack-v1-4@ppc64le as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le"
},
"product_reference": "gitsign-cli-stack-v1-4@ppc64le",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gitsign-cli-stack-v1-4@s390x as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x"
},
"product_reference": "gitsign-cli-stack-v1-4@s390x",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "model-transparency-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64"
},
"product_reference": "model-transparency-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "model-transparency-cli-stack-v1-4@amd64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin"
},
"product_reference": "model-transparency-cli-stack-v1-4@amd64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "model-transparency-cli-stack-v1-4@amd64_windows as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows"
},
"product_reference": "model-transparency-cli-stack-v1-4@amd64_windows",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "model-transparency-cli-stack-v1-4@arm64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64"
},
"product_reference": "model-transparency-cli-stack-v1-4@arm64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "model-transparency-cli-stack-v1-4@arm64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin"
},
"product_reference": "model-transparency-cli-stack-v1-4@arm64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "model-transparency-cli-stack-v1-4@ppc64le as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le"
},
"product_reference": "model-transparency-cli-stack-v1-4@ppc64le",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "model-transparency-cli-stack-v1-4@s390x as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x"
},
"product_reference": "model-transparency-cli-stack-v1-4@s390x",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64"
},
"product_reference": "rekor-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-cli-stack-v1-4@amd64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin"
},
"product_reference": "rekor-cli-stack-v1-4@amd64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-cli-stack-v1-4@amd64_windows as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows"
},
"product_reference": "rekor-cli-stack-v1-4@amd64_windows",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-cli-stack-v1-4@arm64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64"
},
"product_reference": "rekor-cli-stack-v1-4@arm64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-cli-stack-v1-4@arm64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin"
},
"product_reference": "rekor-cli-stack-v1-4@arm64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-cli-stack-v1-4@ppc64le as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le"
},
"product_reference": "rekor-cli-stack-v1-4@ppc64le",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-cli-stack-v1-4@s390x as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x"
},
"product_reference": "rekor-cli-stack-v1-4@s390x",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "trillian-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64"
},
"product_reference": "trillian-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "trillian-cli-stack-v1-4@amd64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin"
},
"product_reference": "trillian-cli-stack-v1-4@amd64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "trillian-cli-stack-v1-4@amd64_windows as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows"
},
"product_reference": "trillian-cli-stack-v1-4@amd64_windows",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "trillian-cli-stack-v1-4@arm64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64"
},
"product_reference": "trillian-cli-stack-v1-4@arm64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "trillian-cli-stack-v1-4@arm64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin"
},
"product_reference": "trillian-cli-stack-v1-4@arm64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "trillian-cli-stack-v1-4@ppc64le as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le"
},
"product_reference": "trillian-cli-stack-v1-4@ppc64le",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "trillian-cli-stack-v1-4@s390x as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x"
},
"product_reference": "trillian-cli-stack-v1-4@s390x",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tuftool-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
},
"product_reference": "tuftool-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-27145",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-06-02T23:01:08.992540+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484207"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "RHBZ#2484207",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27145",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27145"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://go.dev/cl/783621",
"url": "https://go.dev/cl/783621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79694",
"url": "https://go.dev/issue/79694"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5037",
"url": "https://pkg.go.dev/vuln/GO-2026-5037"
}
],
"release_date": "2026-06-02T22:01:36.954000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-30T13:15:29+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48771"
},
{
"category": "workaround",
"details": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-30T13:15:29+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48771"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-39820",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-07T20:01:27.800929+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467820"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net/mail` package. Applications processing untrusted email inputs via `ParseAddress`, `ParseAddressList`, or `ParseDate` functions are susceptible to excessive resource consumption, which can lead to service unavailability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "RHBZ#2467820",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467820"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39820",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://go.dev/cl/759940",
"url": "https://go.dev/cl/759940"
},
{
"category": "external",
"summary": "https://go.dev/issue/78566",
"url": "https://go.dev/issue/78566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4986",
"url": "https://pkg.go.dev/vuln/GO-2026-4986"
}
],
"release_date": "2026-05-07T19:41:19.854000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-30T13:15:29+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48771"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-30T13:15:29+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48771"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-39828",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:46.775641+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480687"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important security flaw in the `golang.org/x/crypto/ssh` library. When an SSH server utilizing this library is configured with specific authentication callbacks that return a `PartialSuccessError` with non-nil permissions, an attacker could bypass intended certificate restrictions, such as `force-command`. This bypass could lead to unauthorized command execution or access on affected Red Hat systems configured with multi-factor authentication and certificate-based access controls.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "RHBZ#2480687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480687"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39828",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39828"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://go.dev/cl/781621",
"url": "https://go.dev/cl/781621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79562",
"url": "https://go.dev/issue/79562"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5014",
"url": "https://pkg.go.dev/vuln/GO-2026-5014"
}
],
"release_date": "2026-05-22T02:31:26.883000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-30T13:15:29+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48771"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions"
},
{
"cve": "CVE-2026-39829",
"cwe": {
"id": "CWE-1284",
"name": "Improper Validation of Specified Quantity in Input"
},
"discovery_date": "2026-05-22T04:01:30.092249+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480681"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in golang.org/x/crypto/ssh is rated as Important. An unauthenticated remote attacker could trigger a denial of service by providing a specially crafted public key with excessively large parameters during SSH public key authentication. This could lead to prolonged CPU consumption on the server, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "RHBZ#2480681",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480681"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39829",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39829"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://go.dev/cl/781641",
"url": "https://go.dev/cl/781641"
},
{
"category": "external",
"summary": "https://go.dev/cl/781661",
"url": "https://go.dev/cl/781661"
},
{
"category": "external",
"summary": "https://go.dev/issue/79565",
"url": "https://go.dev/issue/79565"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5018",
"url": "https://pkg.go.dev/vuln/GO-2026-5018"
}
],
"release_date": "2026-05-22T02:31:27.324000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-30T13:15:29+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48771"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters"
},
{
"cve": "CVE-2026-39830",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2026-05-22T04:01:38.517202+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection\u0027s read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh`. A remote, unauthenticated attacker can exploit this vulnerability by sending unsolicited global request responses to an affected SSH server, leading to resource exhaustion and a denial of service. The impact is considered Important due to the potential for unauthenticated remote disruption of services utilizing the vulnerable SSH library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "RHBZ#2480684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39830",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39830"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://go.dev/cl/781640",
"url": "https://go.dev/cl/781640"
},
{
"category": "external",
"summary": "https://go.dev/cl/781664",
"url": "https://go.dev/cl/781664"
},
{
"category": "external",
"summary": "https://go.dev/issue/79564",
"url": "https://go.dev/issue/79564"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5017",
"url": "https://pkg.go.dev/vuln/GO-2026-5017"
}
],
"release_date": "2026-05-22T02:31:27.208000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-30T13:15:29+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48771"
},
{
"category": "workaround",
"details": "To mitigate this denial of service vulnerability, restrict network access to any service that utilizes the `golang.org/x/crypto/ssh` library and is exposed to untrusted networks. Implement firewall rules to allow connections only from trusted hosts or networks. This action limits the ability of malicious peers to send unsolicited global request responses. A restart of the affected service may be necessary for the new network rules to be applied effectively.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses"
},
{
"cve": "CVE-2026-39832",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:41.402561+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480685"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/crypto/ssh/agent` allows for a security bypass when SSH keys with destination restrictions are forwarded via an SSH agent. This flaw could lead to unintended exposure of SSH keys, enabling an attacker to use the forwarded key without the specified restrictions on remote hosts. Red Hat products utilizing `golang.org/x/crypto/ssh/agent` for key forwarding may be affected if users rely on constraint extensions for limiting key usage.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "RHBZ#2480685",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480685"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39832",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39832"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://go.dev/cl/778642",
"url": "https://go.dev/cl/778642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79435",
"url": "https://go.dev/issue/79435"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5006",
"url": "https://pkg.go.dev/vuln/GO-2026-5006"
}
],
"release_date": "2026-05-22T02:31:26.660000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-30T13:15:29+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48771"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions"
},
{
"cve": "CVE-2026-39833",
"cwe": {
"id": "CWE-358",
"name": "Improperly Implemented Security Check for Standard"
},
"discovery_date": "2026-05-22T04:01:35.714593+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480683"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/agent. The NewKeyring() function, which creates an in-memory keyring, failed to enforce the ConfirmBeforeUse constraint on keys. This allowed keys configured to require user confirmation before use to perform signing operations without any prompt or indication to the user. Consequently, an attacker could potentially bypass intended security controls, leading to unauthorized cryptographic signing actions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to unenforced key confirmation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat rates this issue as Moderate with RH CVSS 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N). A flaw was found in golang.org/x/crypto/ssh/agent where the in-memory keyring returned by NewKeyring() silently accepted SSH agent keys with the ConfirmBeforeUse constraint but did not enforce interactive confirmation before signing. Exploitation requires local access and low privileges on a system where an affected application uses NewKeyring() with ConfirmBeforeUse. Most Red Hat products that bundle golang.org/x/crypto do not use the ssh/agent ConfirmBeforeUse feature in their supported execution paths. The upstream CISA CVSS 9.1 assumes a broader network attack context that does not reflect Red Hat product deployment.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39833"
},
{
"category": "external",
"summary": "RHBZ#2480683",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480683"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39833",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39833"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39833",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39833"
},
{
"category": "external",
"summary": "https://go.dev/cl/778640",
"url": "https://go.dev/cl/778640"
},
{
"category": "external",
"summary": "https://go.dev/cl/778641",
"url": "https://go.dev/cl/778641"
},
{
"category": "external",
"summary": "https://go.dev/issue/79436",
"url": "https://go.dev/issue/79436"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5005",
"url": "https://pkg.go.dev/vuln/GO-2026-5005"
}
],
"release_date": "2026-05-22T02:31:26.294000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-30T13:15:29+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48771"
},
{
"category": "workaround",
"details": "Update affected Go applications to use golang.org/x/crypto version 0.52.0 or later, which rejects unsupported ConfirmBeforeUse keys instead of silently ignoring the constraint. As a workaround, do not add keys with ConfirmBeforeUse to the in-memory keyring from golang.org/x/crypto/ssh/agent, or use an SSH agent implementation that correctly enforces confirm-before-use.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to unenforced key confirmation"
},
{
"cve": "CVE-2026-39835",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-05-22T04:01:27.279943+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480680"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh` affecting SSH servers that utilize `CertChecker` as a public key callback without explicitly configuring `IsUserAuthority` or `IsHostAuthority`. A remote, unauthenticated attacker can trigger a server panic by presenting a specially crafted certificate, leading to service disruption. Exploitation requires a specific, non-default configuration of the `CertChecker`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "RHBZ#2480680",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480680"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39835",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39835"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://go.dev/cl/781660",
"url": "https://go.dev/cl/781660"
},
{
"category": "external",
"summary": "https://go.dev/issue/79563",
"url": "https://go.dev/issue/79563"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5015",
"url": "https://pkg.go.dev/vuln/GO-2026-5015"
}
],
"release_date": "2026-05-22T02:31:26.982000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-30T13:15:29+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48771"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate"
},
{
"cve": "CVE-2026-42151",
"cwe": {
"id": "CWE-256",
"name": "Plaintext Storage of a Password"
},
"discovery_date": "2026-05-04T19:02:26.983660+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466507"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important information disclosure flaw in Prometheus affects instances configured to use Azure AD remote write with OAuth authentication. The client secret, intended to be a secure credential, is exposed in plaintext through the `/-/config` HTTP API endpoint. This could allow an attacker with access to this endpoint to retrieve the secret, potentially compromising integrated Azure AD services.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "RHBZ#2466507",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466507"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42151",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42151"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18587",
"url": "https://github.com/prometheus/prometheus/pull/18587"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18590",
"url": "https://github.com/prometheus/prometheus/pull/18590"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj"
}
],
"release_date": "2026-05-04T18:12:16.917000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-30T13:15:29+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48771"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API"
},
{
"cve": "CVE-2026-42499",
"cwe": {
"id": "CWE-1046",
"name": "Creation of Immutable Text Using String Concatenation"
},
"discovery_date": "2026-05-07T20:00:51.685602+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467809"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `net/mail` package of the Go standard library. A remote attacker can exploit this flaw by sending specially crafted email addresses, leading to excessive resource consumption and a denial of service in Go applications that parse email addresses using the affected library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "RHBZ#2467809",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467809"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42499",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42499"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://go.dev/cl/771520",
"url": "https://go.dev/cl/771520"
},
{
"category": "external",
"summary": "https://go.dev/issue/78987",
"url": "https://go.dev/issue/78987"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4977",
"url": "https://pkg.go.dev/vuln/GO-2026-4977"
}
],
"release_date": "2026-05-07T19:41:18.615000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-30T13:15:29+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48771"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing"
},
{
"cve": "CVE-2026-42508",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-05-22T04:01:49.515058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480688"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in `golang.org/x/crypto/ssh/knownhosts` allows a remote attacker to bypass security checks. This vulnerability arises because the system fails to properly verify the revocation status of a Certificate Authority (CA) `SignatureKey`. In Red Hat environments, this could enable an attacker to present a revoked key, leading to its acceptance as valid and potentially granting unauthorized access or facilitating the spoofing of legitimate entities.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "RHBZ#2480688",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480688"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42508",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42508"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://go.dev/cl/781220",
"url": "https://go.dev/cl/781220"
},
{
"category": "external",
"summary": "https://go.dev/issue/79568",
"url": "https://go.dev/issue/79568"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5021",
"url": "https://pkg.go.dev/vuln/GO-2026-5021"
}
],
"release_date": "2026-05-22T02:31:27.644000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-30T13:15:29+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48771"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey"
},
{
"cve": "CVE-2026-46595",
"cwe": {
"id": "CWE-303",
"name": "Incorrect Implementation of Authentication Algorithm"
},
"discovery_date": "2026-05-22T04:01:52.215134+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480689"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/crypto/ssh is vulnerable to authorization bypass when SSH server configurations rely on source-address validation alongside non-public-key authentication callbacks. An attacker with low privileges who can authenticate through such a callback path may bypass intended source-address restrictions and gain unauthorized SSH access. Red Hat impact sits in services built with affected x/crypto/ssh, including RHEL golang streams, hummingbird Go toolchains, RHACM/MCE agents, and OpenShift or Ceph components that embed Go SSH servers with mixed callback types.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46595"
},
{
"category": "external",
"summary": "RHBZ#2480689",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480689"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46595",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46595"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595"
},
{
"category": "external",
"summary": "https://go.dev/cl/781642",
"url": "https://go.dev/cl/781642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79570",
"url": "https://go.dev/issue/79570"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5023",
"url": "https://pkg.go.dev/vuln/GO-2026-5023"
}
],
"release_date": "2026-05-22T02:31:27.894000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-30T13:15:29+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48771"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation"
}
]
}
RHSA-2026:49702
Vulnerability from csaf_redhat - Published: 2026-08-03 16:04 - Updated: 2026-08-26 04:26Summary
Red Hat Security Advisory: golang security update
Severity
Important
Notes
Topic: An update for golang is now available for Red Hat Enterprise Linux 10.0 Extended Update Support.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: The golang packages provide the Go programming language compiler.
Security Fix(es):
* net/mail: golang: net/mail: Denial of Service via pathological email address parsing (CVE-2026-42499)
* cmd/go: golang: Go command (cmd/go): Integrity bypass due to checksum validation flaw via malicious module proxy (CVE-2026-42501)
* html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content (CVE-2026-39823)
* cmd/go: golang: Go 'go bug' command: Arbitrary file overwrite via symlink attack (CVE-2026-39819)
* net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame (CVE-2026-33814)
* net/mail: golang: Go net/mail: Denial of Service via crafted email inputs (CVE-2026-39820)
* net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811)
* net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls (CVE-2026-39825)
* cmd/go: golang: Go tool pack: Arbitrary file write via malicious archive extraction (CVE-2026-39817)
* html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping (CVE-2026-39826)
* golang.org/x/net/idna: golang: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (CVE-2026-39821)
* net/textproto: golang: Golang net/textproto: Misleading error messages via input injection (CVE-2026-42507)
* crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries (CVE-2026-27145)
* os: golang: Go os.Root: Symlink following vulnerability allows directory traversal (CVE-2026-39822)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.
7.5 (High)
Affected products
Fixed
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-docs-0:1.26.5-1.el10_0.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-misc-0:1.26.5-1.el10_0.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-src-0:1.26.5-1.el10_0.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-tests-0:1.26.5-1.el10_0.noarch | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-docs-0:1.26.5-1.el10_0.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-misc-0:1.26.5-1.el10_0.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-src-0:1.26.5-1.el10_0.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-tests-0:1.26.5-1.el10_0.noarch | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in the HTTP/2 protocol implementation within the Go standard library (golang.org/x/net and net/http/internal/http2). A remote attacker can exploit this vulnerability by sending a specially crafted HTTP/2 SETTINGS frame with the SETTINGS_MAX_FRAME_SIZE parameter set to zero. This malicious frame causes the transport layer to enter an infinite loop of writing CONTINUATION frames, leading to resource exhaustion and a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-docs-0:1.26.5-1.el10_0.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-misc-0:1.26.5-1.el10_0.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-src-0:1.26.5-1.el10_0.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-tests-0:1.26.5-1.el10_0.noarch | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in the "go tool pack" subcommand, a component of the Go programming language tools. This vulnerability allows an attacker to craft a malicious archive file. When this archive is extracted using the "pack" subcommand, it can lead to arbitrary file writes on the filesystem, potentially allowing an attacker to create or modify files in unintended locations.
5.9 (Medium)
Affected products
Fixed
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-docs-0:1.26.5-1.el10_0.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-misc-0:1.26.5-1.el10_0.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-src-0:1.26.5-1.el10_0.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-tests-0:1.26.5-1.el10_0.noarch | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A flaw was found in the 'go bug' command within the Go programming language tools. This command writes to temporary files with predictable names. A local attacker with access to the system's temporary directory could exploit this by creating a symbolic link (symlink) with one of these predictable names. This would cause the 'go bug' command to overwrite the target of the symlink, potentially leading to arbitrary file overwrite.
4.4 (Medium)
Affected products
Fixed
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-docs-0:1.26.5-1.el10_0.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-misc-0:1.26.5-1.el10_0.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-src-0:1.26.5-1.el10_0.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-tests-0:1.26.5-1.el10_0.noarch | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.
7.5 (High)
Affected products
Fixed
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-docs-0:1.26.5-1.el10_0.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-misc-0:1.26.5-1.el10_0.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-src-0:1.26.5-1.el10_0.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-tests-0:1.26.5-1.el10_0.noarch | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-docs-0:1.26.5-1.el10_0.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-misc-0:1.26.5-1.el10_0.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-src-0:1.26.5-1.el10_0.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-tests-0:1.26.5-1.el10_0.noarch | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in the `os.Root` functionality of Go on Unix systems. This vulnerability allows an attacker to bypass intended directory restrictions by crafting a path that ends with a symbolic link and a trailing slash. When a file is opened in `os.Root` with such a path, the symbolic link is improperly followed, potentially leading to access to locations outside of the defined root directory. This could result in information disclosure or unauthorized file system access.
7.8 (High)
Affected products
Fixed
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-docs-0:1.26.5-1.el10_0.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-misc-0:1.26.5-1.el10_0.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-src-0:1.26.5-1.el10_0.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-tests-0:1.26.5-1.el10_0.noarch | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in the `html/template` package of Go. A remote attacker could exploit this vulnerability by inserting ASCII whitespaces around the equals sign (`=`) within a URL's content attribute inside a `<meta>` tag. This improper escaping could lead to Cross-Site Scripting (XSS), allowing the attacker to execute malicious scripts in the user's browser.
5.4 (Medium)
Affected products
Fixed
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-docs-0:1.26.5-1.el10_0.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-misc-0:1.26.5-1.el10_0.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-src-0:1.26.5-1.el10_0.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-tests-0:1.26.5-1.el10_0.noarch | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in the `net/http/httputil` package, specifically within the `ReverseProxy` component. This vulnerability allows the `ReverseProxy` to forward query parameters that are not visible to `Rewrite` functions. This occurs because the `ReverseProxy` does not correctly consider the `url.ParseQuery` limit on the total number of query parameters. A remote attacker could exploit this to send hidden query parameters, potentially bypassing security policies or controls implemented by `Rewrite` functions, leading to information disclosure or unexpected behavior.
6.5 (Medium)
Affected products
Fixed
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-docs-0:1.26.5-1.el10_0.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-misc-0:1.26.5-1.el10_0.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-src-0:1.26.5-1.el10_0.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-tests-0:1.26.5-1.el10_0.noarch | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in html/template. A trusted template author could craft a script tag with an empty or whitespace-only 'type' attribute. This vulnerability causes the template engine to incorrectly escape data passed into the script block, potentially leading to cross-site scripting (XSS). An attacker could leverage this to execute arbitrary client-side scripts in a user's browser.
5.4 (Medium)
Affected products
Fixed
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-docs-0:1.26.5-1.el10_0.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-misc-0:1.26.5-1.el10_0.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-src-0:1.26.5-1.el10_0.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-tests-0:1.26.5-1.el10_0.noarch | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-docs-0:1.26.5-1.el10_0.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-misc-0:1.26.5-1.el10_0.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-src-0:1.26.5-1.el10_0.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-tests-0:1.26.5-1.el10_0.noarch | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in the Go command (`cmd/go`). A malicious module proxy can exploit this vulnerability by bypassing the validation of module checksums. This allows the proxy to serve altered versions of the Go toolchain, which the `go` command may then download and execute without proper verification. This can lead to the execution of untrusted code, compromising the integrity of the Go development environment.
5.3 (Medium)
Affected products
Fixed
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-docs-0:1.26.5-1.el10_0.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-misc-0:1.26.5-1.el10_0.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-src-0:1.26.5-1.el10_0.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-tests-0:1.26.5-1.el10_0.noarch | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in the net/textproto package in Golang. When functions in this package return errors, they include their input as part of the error message. An attacker could exploit this by injecting misleading content into these error messages, which are then printed or logged. This could lead to confusion or misinterpretation of critical system information.
5.3 (Medium)
Affected products
Fixed
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-docs-0:1.26.5-1.el10_0.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-misc-0:1.26.5-1.el10_0.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-src-0:1.26.5-1.el10_0.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-tests-0:1.26.5-1.el10_0.noarch | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
References
120 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for golang is now available for Red Hat Enterprise Linux 10.0 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The golang packages provide the Go programming language compiler.\n\nSecurity Fix(es):\n\n* net/mail: golang: net/mail: Denial of Service via pathological email address parsing (CVE-2026-42499)\n\n* cmd/go: golang: Go command (cmd/go): Integrity bypass due to checksum validation flaw via malicious module proxy (CVE-2026-42501)\n\n* html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content (CVE-2026-39823)\n\n* cmd/go: golang: Go \u0027go bug\u0027 command: Arbitrary file overwrite via symlink attack (CVE-2026-39819)\n\n* net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame (CVE-2026-33814)\n\n* net/mail: golang: Go net/mail: Denial of Service via crafted email inputs (CVE-2026-39820)\n\n* net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811)\n\n* net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls (CVE-2026-39825)\n\n* cmd/go: golang: Go tool pack: Arbitrary file write via malicious archive extraction (CVE-2026-39817)\n\n* html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping (CVE-2026-39826)\n\n* golang.org/x/net/idna: golang: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (CVE-2026-39821)\n\n* net/textproto: golang: Golang net/textproto: Misleading error messages via input injection (CVE-2026-42507)\n\n* crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries (CVE-2026-27145)\n\n* os: golang: Go os.Root: Symlink following vulnerability allows directory traversal (CVE-2026-39822)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:49702",
"url": "https://access.redhat.com/errata/RHSA-2026:49702"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2467809",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467809"
},
{
"category": "external",
"summary": "2467810",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467810"
},
{
"category": "external",
"summary": "2467811",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467811"
},
{
"category": "external",
"summary": "2467813",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467813"
},
{
"category": "external",
"summary": "2467815",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467815"
},
{
"category": "external",
"summary": "2467820",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467820"
},
{
"category": "external",
"summary": "2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "2467823",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467823"
},
{
"category": "external",
"summary": "2467825",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467825"
},
{
"category": "external",
"summary": "2467826",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467826"
},
{
"category": "external",
"summary": "2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "2484205",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484205"
},
{
"category": "external",
"summary": "2484207",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
},
{
"category": "external",
"summary": "2498152",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498152"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_49702.json"
}
],
"title": "Red Hat Security Advisory: golang security update",
"tracking": {
"current_release_date": "2026-08-26T04:26:30+00:00",
"generator": {
"date": "2026-08-26T04:26:30+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:49702",
"initial_release_date": "2026-08-03T16:04:08+00:00",
"revision_history": [
{
"date": "2026-08-03T16:04:08+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-03T16:04:08+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-26T04:26:30+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product": {
"name": "Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux_eus:10.0"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "go-toolset-0:1.26.5-1.el10_0.aarch64",
"product": {
"name": "go-toolset-0:1.26.5-1.el10_0.aarch64",
"product_id": "go-toolset-0:1.26.5-1.el10_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/go-toolset@1.26.5-1.el10_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "golang-0:1.26.5-1.el10_0.aarch64",
"product": {
"name": "golang-0:1.26.5-1.el10_0.aarch64",
"product_id": "golang-0:1.26.5-1.el10_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang@1.26.5-1.el10_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "golang-bin-0:1.26.5-1.el10_0.aarch64",
"product": {
"name": "golang-bin-0:1.26.5-1.el10_0.aarch64",
"product_id": "golang-bin-0:1.26.5-1.el10_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang-bin@1.26.5-1.el10_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "golang-race-0:1.26.5-1.el10_0.aarch64",
"product": {
"name": "golang-race-0:1.26.5-1.el10_0.aarch64",
"product_id": "golang-race-0:1.26.5-1.el10_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang-race@1.26.5-1.el10_0?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "go-toolset-0:1.26.5-1.el10_0.ppc64le",
"product": {
"name": "go-toolset-0:1.26.5-1.el10_0.ppc64le",
"product_id": "go-toolset-0:1.26.5-1.el10_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/go-toolset@1.26.5-1.el10_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "golang-0:1.26.5-1.el10_0.ppc64le",
"product": {
"name": "golang-0:1.26.5-1.el10_0.ppc64le",
"product_id": "golang-0:1.26.5-1.el10_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang@1.26.5-1.el10_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "golang-bin-0:1.26.5-1.el10_0.ppc64le",
"product": {
"name": "golang-bin-0:1.26.5-1.el10_0.ppc64le",
"product_id": "golang-bin-0:1.26.5-1.el10_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang-bin@1.26.5-1.el10_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "golang-race-0:1.26.5-1.el10_0.ppc64le",
"product": {
"name": "golang-race-0:1.26.5-1.el10_0.ppc64le",
"product_id": "golang-race-0:1.26.5-1.el10_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang-race@1.26.5-1.el10_0?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "go-toolset-0:1.26.5-1.el10_0.s390x",
"product": {
"name": "go-toolset-0:1.26.5-1.el10_0.s390x",
"product_id": "go-toolset-0:1.26.5-1.el10_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/go-toolset@1.26.5-1.el10_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "golang-0:1.26.5-1.el10_0.s390x",
"product": {
"name": "golang-0:1.26.5-1.el10_0.s390x",
"product_id": "golang-0:1.26.5-1.el10_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang@1.26.5-1.el10_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "golang-bin-0:1.26.5-1.el10_0.s390x",
"product": {
"name": "golang-bin-0:1.26.5-1.el10_0.s390x",
"product_id": "golang-bin-0:1.26.5-1.el10_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang-bin@1.26.5-1.el10_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "golang-race-0:1.26.5-1.el10_0.s390x",
"product": {
"name": "golang-race-0:1.26.5-1.el10_0.s390x",
"product_id": "golang-race-0:1.26.5-1.el10_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang-race@1.26.5-1.el10_0?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "go-toolset-0:1.26.5-1.el10_0.x86_64",
"product": {
"name": "go-toolset-0:1.26.5-1.el10_0.x86_64",
"product_id": "go-toolset-0:1.26.5-1.el10_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/go-toolset@1.26.5-1.el10_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "golang-0:1.26.5-1.el10_0.x86_64",
"product": {
"name": "golang-0:1.26.5-1.el10_0.x86_64",
"product_id": "golang-0:1.26.5-1.el10_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang@1.26.5-1.el10_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "golang-bin-0:1.26.5-1.el10_0.x86_64",
"product": {
"name": "golang-bin-0:1.26.5-1.el10_0.x86_64",
"product_id": "golang-bin-0:1.26.5-1.el10_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang-bin@1.26.5-1.el10_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "golang-race-0:1.26.5-1.el10_0.x86_64",
"product": {
"name": "golang-race-0:1.26.5-1.el10_0.x86_64",
"product_id": "golang-race-0:1.26.5-1.el10_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang-race@1.26.5-1.el10_0?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "golang-0:1.26.5-1.el10_0.src",
"product": {
"name": "golang-0:1.26.5-1.el10_0.src",
"product_id": "golang-0:1.26.5-1.el10_0.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang@1.26.5-1.el10_0?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "golang-docs-0:1.26.5-1.el10_0.noarch",
"product": {
"name": "golang-docs-0:1.26.5-1.el10_0.noarch",
"product_id": "golang-docs-0:1.26.5-1.el10_0.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang-docs@1.26.5-1.el10_0?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "golang-misc-0:1.26.5-1.el10_0.noarch",
"product": {
"name": "golang-misc-0:1.26.5-1.el10_0.noarch",
"product_id": "golang-misc-0:1.26.5-1.el10_0.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang-misc@1.26.5-1.el10_0?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "golang-src-0:1.26.5-1.el10_0.noarch",
"product": {
"name": "golang-src-0:1.26.5-1.el10_0.noarch",
"product_id": "golang-src-0:1.26.5-1.el10_0.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang-src@1.26.5-1.el10_0?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "golang-tests-0:1.26.5-1.el10_0.noarch",
"product": {
"name": "golang-tests-0:1.26.5-1.el10_0.noarch",
"product_id": "golang-tests-0:1.26.5-1.el10_0.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang-tests@1.26.5-1.el10_0?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "go-toolset-0:1.26.5-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.aarch64"
},
"product_reference": "go-toolset-0:1.26.5-1.el10_0.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go-toolset-0:1.26.5-1.el10_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.ppc64le"
},
"product_reference": "go-toolset-0:1.26.5-1.el10_0.ppc64le",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go-toolset-0:1.26.5-1.el10_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.s390x"
},
"product_reference": "go-toolset-0:1.26.5-1.el10_0.s390x",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go-toolset-0:1.26.5-1.el10_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.x86_64"
},
"product_reference": "go-toolset-0:1.26.5-1.el10_0.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-0:1.26.5-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.aarch64"
},
"product_reference": "golang-0:1.26.5-1.el10_0.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-0:1.26.5-1.el10_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.ppc64le"
},
"product_reference": "golang-0:1.26.5-1.el10_0.ppc64le",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-0:1.26.5-1.el10_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.s390x"
},
"product_reference": "golang-0:1.26.5-1.el10_0.s390x",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-0:1.26.5-1.el10_0.src as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.src"
},
"product_reference": "golang-0:1.26.5-1.el10_0.src",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-0:1.26.5-1.el10_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.x86_64"
},
"product_reference": "golang-0:1.26.5-1.el10_0.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-bin-0:1.26.5-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.aarch64"
},
"product_reference": "golang-bin-0:1.26.5-1.el10_0.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-bin-0:1.26.5-1.el10_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.ppc64le"
},
"product_reference": "golang-bin-0:1.26.5-1.el10_0.ppc64le",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-bin-0:1.26.5-1.el10_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.s390x"
},
"product_reference": "golang-bin-0:1.26.5-1.el10_0.s390x",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-bin-0:1.26.5-1.el10_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.x86_64"
},
"product_reference": "golang-bin-0:1.26.5-1.el10_0.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-docs-0:1.26.5-1.el10_0.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:golang-docs-0:1.26.5-1.el10_0.noarch"
},
"product_reference": "golang-docs-0:1.26.5-1.el10_0.noarch",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-misc-0:1.26.5-1.el10_0.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:golang-misc-0:1.26.5-1.el10_0.noarch"
},
"product_reference": "golang-misc-0:1.26.5-1.el10_0.noarch",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-race-0:1.26.5-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.aarch64"
},
"product_reference": "golang-race-0:1.26.5-1.el10_0.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-race-0:1.26.5-1.el10_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.ppc64le"
},
"product_reference": "golang-race-0:1.26.5-1.el10_0.ppc64le",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-race-0:1.26.5-1.el10_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.s390x"
},
"product_reference": "golang-race-0:1.26.5-1.el10_0.s390x",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-race-0:1.26.5-1.el10_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.x86_64"
},
"product_reference": "golang-race-0:1.26.5-1.el10_0.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-src-0:1.26.5-1.el10_0.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:golang-src-0:1.26.5-1.el10_0.noarch"
},
"product_reference": "golang-src-0:1.26.5-1.el10_0.noarch",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-tests-0:1.26.5-1.el10_0.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:golang-tests-0:1.26.5-1.el10_0.noarch"
},
"product_reference": "golang-tests-0:1.26.5-1.el10_0.noarch",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-27145",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-06-02T23:01:08.992540+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484207"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.src",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-docs-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-misc-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-src-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-tests-0:1.26.5-1.el10_0.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "RHBZ#2484207",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27145",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27145"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://go.dev/cl/783621",
"url": "https://go.dev/cl/783621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79694",
"url": "https://go.dev/issue/79694"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5037",
"url": "https://pkg.go.dev/vuln/GO-2026-5037"
}
],
"release_date": "2026-06-02T22:01:36.954000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T16:04:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.src",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-docs-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-misc-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-src-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-tests-0:1.26.5-1.el10_0.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49702"
},
{
"category": "workaround",
"details": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"product_ids": [
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.src",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-docs-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-misc-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-src-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-tests-0:1.26.5-1.el10_0.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.src",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-docs-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-misc-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-src-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-tests-0:1.26.5-1.el10_0.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.src",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-docs-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-misc-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-src-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-tests-0:1.26.5-1.el10_0.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T16:04:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.src",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-docs-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-misc-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-src-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-tests-0:1.26.5-1.el10_0.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49702"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.src",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-docs-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-misc-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-src-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-tests-0:1.26.5-1.el10_0.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.src",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-docs-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-misc-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-src-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-tests-0:1.26.5-1.el10_0.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-33814",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-07T20:01:11.324941+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467815"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the HTTP/2 protocol implementation within the Go standard library (golang.org/x/net and net/http/internal/http2). A remote attacker can exploit this vulnerability by sending a specially crafted HTTP/2 SETTINGS frame with the SETTINGS_MAX_FRAME_SIZE parameter set to zero. This malicious frame causes the transport layer to enter an infinite loop of writing CONTINUATION frames, leading to resource exhaustion and a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important denial of service flaw in the Go HTTP/2 protocol implementation allows a remote, unauthenticated attacker to exhaust system resources. By sending a specially crafted HTTP/2 SETTINGS frame with a zero-value SETTINGS_MAX_FRAME_SIZE, the vulnerable Go library enters an infinite loop, impacting the availability of services utilizing HTTP/2.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.src",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-docs-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-misc-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-src-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-tests-0:1.26.5-1.el10_0.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33814"
},
{
"category": "external",
"summary": "RHBZ#2467815",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467815"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33814",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33814"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33814",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33814"
},
{
"category": "external",
"summary": "https://go.dev/cl/761581",
"url": "https://go.dev/cl/761581"
},
{
"category": "external",
"summary": "https://go.dev/cl/761640",
"url": "https://go.dev/cl/761640"
},
{
"category": "external",
"summary": "https://go.dev/issue/78476",
"url": "https://go.dev/issue/78476"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4918",
"url": "https://pkg.go.dev/vuln/GO-2026-4918"
}
],
"release_date": "2026-05-07T19:41:17.631000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T16:04:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.src",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-docs-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-misc-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-src-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-tests-0:1.26.5-1.el10_0.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49702"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.src",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-docs-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-misc-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-src-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-tests-0:1.26.5-1.el10_0.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.src",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-docs-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-misc-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-src-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-tests-0:1.26.5-1.el10_0.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame"
},
{
"cve": "CVE-2026-39817",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-05-07T20:01:43.510043+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467825"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the \"go tool pack\" subcommand, a component of the Go programming language tools. This vulnerability allows an attacker to craft a malicious archive file. When this archive is extracted using the \"pack\" subcommand, it can lead to arbitrary file writes on the filesystem, potentially allowing an attacker to create or modify files in unintended locations.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "cmd/go: golang: Go tool pack: Arbitrary file write via malicious archive extraction",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.src",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-docs-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-misc-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-src-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-tests-0:1.26.5-1.el10_0.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39817"
},
{
"category": "external",
"summary": "RHBZ#2467825",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467825"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39817",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39817"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39817",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39817"
},
{
"category": "external",
"summary": "https://go.dev/cl/767520",
"url": "https://go.dev/cl/767520"
},
{
"category": "external",
"summary": "https://go.dev/issue/78778",
"url": "https://go.dev/issue/78778"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4979",
"url": "https://pkg.go.dev/vuln/GO-2026-4979"
}
],
"release_date": "2026-05-07T19:41:18.993000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T16:04:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.src",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-docs-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-misc-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-src-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-tests-0:1.26.5-1.el10_0.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49702"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.src",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-docs-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-misc-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-src-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-tests-0:1.26.5-1.el10_0.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "cmd/go: golang: Go tool pack: Arbitrary file write via malicious archive extraction"
},
{
"cve": "CVE-2026-39819",
"cwe": {
"id": "CWE-59",
"name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
},
"discovery_date": "2026-05-07T20:01:04.403877+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467813"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the \u0027go bug\u0027 command within the Go programming language tools. This command writes to temporary files with predictable names. A local attacker with access to the system\u0027s temporary directory could exploit this by creating a symbolic link (symlink) with one of these predictable names. This would cause the \u0027go bug\u0027 command to overwrite the target of the symlink, potentially leading to arbitrary file overwrite.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "cmd/go: golang: Go \u0027go bug\u0027 command: Arbitrary file overwrite via symlink attack",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.src",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-docs-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-misc-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-src-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-tests-0:1.26.5-1.el10_0.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39819"
},
{
"category": "external",
"summary": "RHBZ#2467813",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467813"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39819",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39819"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39819",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39819"
},
{
"category": "external",
"summary": "https://go.dev/cl/763882",
"url": "https://go.dev/cl/763882"
},
{
"category": "external",
"summary": "https://go.dev/issue/78584",
"url": "https://go.dev/issue/78584"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4978",
"url": "https://pkg.go.dev/vuln/GO-2026-4978"
}
],
"release_date": "2026-05-07T19:41:18.849000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T16:04:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.src",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-docs-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-misc-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-src-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-tests-0:1.26.5-1.el10_0.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49702"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.src",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-docs-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-misc-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-src-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-tests-0:1.26.5-1.el10_0.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "cmd/go: golang: Go \u0027go bug\u0027 command: Arbitrary file overwrite via symlink attack"
},
{
"cve": "CVE-2026-39820",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-07T20:01:27.800929+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467820"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net/mail` package. Applications processing untrusted email inputs via `ParseAddress`, `ParseAddressList`, or `ParseDate` functions are susceptible to excessive resource consumption, which can lead to service unavailability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.src",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-docs-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-misc-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-src-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-tests-0:1.26.5-1.el10_0.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "RHBZ#2467820",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467820"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39820",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://go.dev/cl/759940",
"url": "https://go.dev/cl/759940"
},
{
"category": "external",
"summary": "https://go.dev/issue/78566",
"url": "https://go.dev/issue/78566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4986",
"url": "https://pkg.go.dev/vuln/GO-2026-4986"
}
],
"release_date": "2026-05-07T19:41:19.854000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T16:04:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.src",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-docs-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-misc-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-src-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-tests-0:1.26.5-1.el10_0.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49702"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.src",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-docs-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-misc-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-src-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-tests-0:1.26.5-1.el10_0.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.src",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-docs-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-misc-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-src-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-tests-0:1.26.5-1.el10_0.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.src",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-docs-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-misc-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-src-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-tests-0:1.26.5-1.el10_0.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T16:04:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.src",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-docs-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-misc-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-src-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-tests-0:1.26.5-1.el10_0.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49702"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.src",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-docs-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-misc-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-src-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-tests-0:1.26.5-1.el10_0.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.src",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-docs-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-misc-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-src-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-tests-0:1.26.5-1.el10_0.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-39822",
"cwe": {
"id": "CWE-59",
"name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
},
"discovery_date": "2026-07-08T17:01:53.592869+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2498152"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `os.Root` functionality of Go on Unix systems. This vulnerability allows an attacker to bypass intended directory restrictions by crafting a path that ends with a symbolic link and a trailing slash. When a file is opened in `os.Root` with such a path, the symbolic link is improperly followed, potentially leading to access to locations outside of the defined root directory. This could result in information disclosure or unauthorized file system access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: Go os.Root: Symlink following vulnerability allows directory traversal",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in Go\u0027s os.Root implementation. On Unix systems, `os.Root.Open()` improperly follows symlinks to locations outside the root directory when the path ends with a trailing slash (e.g., root.Open(\"symlink/\")). This is because `openat()` with `O_NOFOLLOW` does not prevent symlink resolution when the path has a trailing /. An attacker able to create symlinks within an os.Root directory could use this to read or write files outside the intended root. The os.Root API was introduced in Go 1.24. Go versions prior to 1.24 are not affected. This issue is fixed in Go 1.25.12 and Go 1.26.5.\n\nThe following symbols are affected:\n* `OpenInRoot`: Opens a file or directory within an `os.Root`.\n* `Root.Create`: Creates a file inside an `os.Root`.\n* `Root.Open`: Opens a path relative to an `os.Root`.\n* `Root.OpenFile`: Opens a file with specified flags and permissions inside an `os.Root`.\n* `Root.OpenRoot`: Opens a sub-root directory from an `os.Root`.\n* `Root.ReadFile`: Reads a file inside an `os.Root`.\n* `Root.WriteFile`: Writes a file inside an `os.Root`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.src",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-docs-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-misc-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-src-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-tests-0:1.26.5-1.el10_0.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39822"
},
{
"category": "external",
"summary": "RHBZ#2498152",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498152"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39822",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39822"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39822",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39822"
},
{
"category": "external",
"summary": "https://go.dev/cl/797880",
"url": "https://go.dev/cl/797880"
},
{
"category": "external",
"summary": "https://go.dev/issue/79005",
"url": "https://go.dev/issue/79005"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/OrmQE_Yp5Sc",
"url": "https://groups.google.com/g/golang-announce/c/OrmQE_Yp5Sc"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4970",
"url": "https://pkg.go.dev/vuln/GO-2026-4970"
}
],
"release_date": "2026-07-08T15:46:27.199000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T16:04:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.src",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-docs-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-misc-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-src-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-tests-0:1.26.5-1.el10_0.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49702"
},
{
"category": "workaround",
"details": "There is no mitigation for this issue other than updating the Go toolchain to Go 1.25.12 or Go 1.26.5. Programs compiled with Go \u003e= 1.24 that do not use the os.Root API are not affected by this vulnerability.\nThe os.Root API was introduced in Go 1.24. Go versions prior to 1.24 are not affected.\nThis issue is fixed in Go 1.25.12 and Go 1.26.5.",
"product_ids": [
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.src",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-docs-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-misc-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-src-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-tests-0:1.26.5-1.el10_0.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.src",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-docs-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-misc-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-src-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-tests-0:1.26.5-1.el10_0.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang: Go os.Root: Symlink following vulnerability allows directory traversal"
},
{
"cve": "CVE-2026-39823",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-07T20:00:58.284024+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467811"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `html/template` package of Go. A remote attacker could exploit this vulnerability by inserting ASCII whitespaces around the equals sign (`=`) within a URL\u0027s content attribute inside a `\u003cmeta\u003e` tag. This improper escaping could lead to Cross-Site Scripting (XSS), allowing the attacker to execute malicious scripts in the user\u0027s browser.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat products ship the Go `html/template` package as a dependency of various Go-based components. The affected functionality involves URL escaping inside `\u003cmeta\u003e` tag content attributes, which requires an application to render user-controlled URLs in meta tags using `html/template`. While the vulnerable code is present, exploitation requires a specific usage pattern that is uncommon in Red Hat product code paths.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.src",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-docs-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-misc-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-src-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-tests-0:1.26.5-1.el10_0.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39823"
},
{
"category": "external",
"summary": "RHBZ#2467811",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467811"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39823",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39823"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39823",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39823"
},
{
"category": "external",
"summary": "https://go.dev/cl/769920",
"url": "https://go.dev/cl/769920"
},
{
"category": "external",
"summary": "https://go.dev/issue/78913",
"url": "https://go.dev/issue/78913"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4982",
"url": "https://pkg.go.dev/vuln/GO-2026-4982"
}
],
"release_date": "2026-05-07T19:41:19.524000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T16:04:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.src",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-docs-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-misc-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-src-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-tests-0:1.26.5-1.el10_0.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49702"
},
{
"category": "workaround",
"details": "Ensure that user-supplied URLs are validated and sanitized before being passed to Go\u0027s `html/template` package for rendering in HTML meta tag content attributes. Avoid rendering untrusted URL data directly in meta tag content attributes.",
"product_ids": [
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.src",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-docs-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-misc-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-src-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-tests-0:1.26.5-1.el10_0.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.src",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-docs-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-misc-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-src-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-tests-0:1.26.5-1.el10_0.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content"
},
{
"cve": "CVE-2026-39825",
"cwe": {
"id": "CWE-472",
"name": "External Control of Assumed-Immutable Web Parameter"
},
"discovery_date": "2026-05-07T20:01:37.714133+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467823"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/http/httputil` package, specifically within the `ReverseProxy` component. This vulnerability allows the `ReverseProxy` to forward query parameters that are not visible to `Rewrite` functions. This occurs because the `ReverseProxy` does not correctly consider the `url.ParseQuery` limit on the total number of query parameters. A remote attacker could exploit this to send hidden query parameters, potentially bypassing security policies or controls implemented by `Rewrite` functions, leading to information disclosure or unexpected behavior.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in Go\u0027s net/http/httputil package where ReverseProxy can forward query parameters that are hidden from Rewrite or Director functions. This occurs when the number of query parameters exceeds the url.ParseQuery limit (controlled by the GODEBUG setting urlmaxqueryparams). While Red Hat ships Go-based components across many products, exploitation requires that an application use ReverseProxy with a Rewrite or Director function that relies on query parameter inspection for security enforcement, which limits the practical impact of this vulnerability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.src",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-docs-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-misc-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-src-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-tests-0:1.26.5-1.el10_0.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39825"
},
{
"category": "external",
"summary": "RHBZ#2467823",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467823"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39825",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39825"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39825",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39825"
},
{
"category": "external",
"summary": "https://go.dev/cl/770541",
"url": "https://go.dev/cl/770541"
},
{
"category": "external",
"summary": "https://go.dev/issue/78948",
"url": "https://go.dev/issue/78948"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4976",
"url": "https://pkg.go.dev/vuln/GO-2026-4976"
}
],
"release_date": "2026-05-07T19:41:18.453000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T16:04:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.src",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-docs-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-misc-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-src-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-tests-0:1.26.5-1.el10_0.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49702"
},
{
"category": "workaround",
"details": "Increase the maximum number of query parameters allowed by setting the GODEBUG environment variable `urlmaxqueryparams` to a higher value (e.g., `GODEBUG=urlmaxqueryparams=20000`), or validate and enforce security controls on query parameters at the backend service rather than relying solely on the ReverseProxy\u0027s Rewrite or Director function for security filtering.",
"product_ids": [
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.src",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-docs-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-misc-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-src-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-tests-0:1.26.5-1.el10_0.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.src",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-docs-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-misc-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-src-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-tests-0:1.26.5-1.el10_0.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls"
},
{
"cve": "CVE-2026-39826",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-07T20:01:46.305827+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467826"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in html/template. A trusted template author could craft a script tag with an empty or whitespace-only \u0027type\u0027 attribute. This vulnerability causes the template engine to incorrectly escape data passed into the script block, potentially leading to cross-site scripting (XSS). An attacker could leverage this to execute arbitrary client-side scripts in a user\u0027s browser.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.src",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-docs-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-misc-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-src-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-tests-0:1.26.5-1.el10_0.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39826"
},
{
"category": "external",
"summary": "RHBZ#2467826",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467826"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39826",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39826"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39826",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39826"
},
{
"category": "external",
"summary": "https://go.dev/cl/771180",
"url": "https://go.dev/cl/771180"
},
{
"category": "external",
"summary": "https://go.dev/issue/78981",
"url": "https://go.dev/issue/78981"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4980",
"url": "https://pkg.go.dev/vuln/GO-2026-4980"
}
],
"release_date": "2026-05-07T19:41:19.138000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T16:04:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.src",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-docs-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-misc-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-src-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-tests-0:1.26.5-1.el10_0.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49702"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.src",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-docs-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-misc-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-src-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-tests-0:1.26.5-1.el10_0.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.src",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-docs-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-misc-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-src-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-tests-0:1.26.5-1.el10_0.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping"
},
{
"cve": "CVE-2026-42499",
"cwe": {
"id": "CWE-1046",
"name": "Creation of Immutable Text Using String Concatenation"
},
"discovery_date": "2026-05-07T20:00:51.685602+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467809"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `net/mail` package of the Go standard library. A remote attacker can exploit this flaw by sending specially crafted email addresses, leading to excessive resource consumption and a denial of service in Go applications that parse email addresses using the affected library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.src",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-docs-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-misc-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-src-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-tests-0:1.26.5-1.el10_0.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "RHBZ#2467809",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467809"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42499",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42499"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://go.dev/cl/771520",
"url": "https://go.dev/cl/771520"
},
{
"category": "external",
"summary": "https://go.dev/issue/78987",
"url": "https://go.dev/issue/78987"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4977",
"url": "https://pkg.go.dev/vuln/GO-2026-4977"
}
],
"release_date": "2026-05-07T19:41:18.615000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T16:04:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.src",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-docs-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-misc-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-src-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-tests-0:1.26.5-1.el10_0.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49702"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.src",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-docs-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-misc-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-src-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-tests-0:1.26.5-1.el10_0.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.src",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-docs-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-misc-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-src-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-tests-0:1.26.5-1.el10_0.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing"
},
{
"cve": "CVE-2026-42501",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-05-07T20:00:54.811489+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467810"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Go command (`cmd/go`). A malicious module proxy can exploit this vulnerability by bypassing the validation of module checksums. This allows the proxy to serve altered versions of the Go toolchain, which the `go` command may then download and execute without proper verification. This can lead to the execution of untrusted code, compromising the integrity of the Go development environment.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "cmd/go: golang: Go command (cmd/go): Integrity bypass due to checksum validation flaw via malicious module proxy",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Moderate impact flaw in the Go command (`cmd/go`) allows a malicious module proxy to bypass checksum validation, potentially leading to the execution of untrusted Go toolchains. Red Hat products utilizing the Go command are vulnerable if configured to use an untrusted module proxy or checksum database, as this could compromise the integrity of the Go development environment. Exploitation requires user interaction with a compromised proxy.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.src",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-docs-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-misc-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-src-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-tests-0:1.26.5-1.el10_0.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42501"
},
{
"category": "external",
"summary": "RHBZ#2467810",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467810"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42501",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42501"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42501",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42501"
},
{
"category": "external",
"summary": "https://go.dev/cl/775321",
"url": "https://go.dev/cl/775321"
},
{
"category": "external",
"summary": "https://go.dev/issue/79070",
"url": "https://go.dev/issue/79070"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4984",
"url": "https://pkg.go.dev/vuln/GO-2026-4984"
}
],
"release_date": "2026-05-07T19:41:19.691000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T16:04:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.src",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-docs-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-misc-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-src-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-tests-0:1.26.5-1.el10_0.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49702"
},
{
"category": "workaround",
"details": "To verify the integrity of Go module dependencies and detect potential tampering by a malicious proxy, users can revalidate all dependencies of the current module. This process involves removing the existing `go.sum` file and then re-generating and verifying module checksums.\n\nExecute the following commands in your module\u0027s root directory:\n```bash\nrm go.sum\ngo mod tidy\ngo mod verify\n```\nThis operation will re-download and re-verify all module dependencies. Be aware that this may affect your local module cache and could require re-building projects.",
"product_ids": [
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.src",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-docs-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-misc-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-src-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-tests-0:1.26.5-1.el10_0.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.src",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-docs-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-misc-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-src-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-tests-0:1.26.5-1.el10_0.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "cmd/go: golang: Go command (cmd/go): Integrity bypass due to checksum validation flaw via malicious module proxy"
},
{
"cve": "CVE-2026-42507",
"cwe": {
"id": "CWE-117",
"name": "Improper Output Neutralization for Logs"
},
"discovery_date": "2026-06-02T23:01:03.125126+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484205"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the net/textproto package in Golang. When functions in this package return errors, they include their input as part of the error message. An attacker could exploit this by injecting misleading content into these error messages, which are then printed or logged. This could lead to confusion or misinterpretation of critical system information.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/textproto: golang: Golang net/textproto: Misleading error messages via input injection",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.src",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-docs-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-misc-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-src-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-tests-0:1.26.5-1.el10_0.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42507"
},
{
"category": "external",
"summary": "RHBZ#2484205",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484205"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42507",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42507"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42507",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42507"
},
{
"category": "external",
"summary": "https://go.dev/cl/777060",
"url": "https://go.dev/cl/777060"
},
{
"category": "external",
"summary": "https://go.dev/issue/79346",
"url": "https://go.dev/issue/79346"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5039",
"url": "https://pkg.go.dev/vuln/GO-2026-5039"
}
],
"release_date": "2026-06-02T22:01:37.307000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T16:04:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.src",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-docs-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-misc-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-src-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-tests-0:1.26.5-1.el10_0.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49702"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.src",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-docs-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-misc-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-src-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-tests-0:1.26.5-1.el10_0.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:go-toolset-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.src",
"AppStream-10.0.Z.E2S:golang-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-bin-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-docs-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-misc-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:golang-race-0:1.26.5-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:golang-src-0:1.26.5-1.el10_0.noarch",
"AppStream-10.0.Z.E2S:golang-tests-0:1.26.5-1.el10_0.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "net/textproto: golang: Golang net/textproto: Misleading error messages via input injection"
}
]
}
RHSA-2026:49703
Vulnerability from csaf_redhat - Published: 2026-08-03 16:15 - Updated: 2026-08-26 04:26Summary
Red Hat Security Advisory: delve security, bug fix, and enhancement update
Severity
Important
Notes
Topic: An update for delve is now available for Red Hat Enterprise Linux 10.0 Extended Update Support.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Delve is a debugger for the Go programming language. The goal of the project is to provide a simple, full featured debugging tool for Go. Delve should be easy to invoke and easy to use. Chances are if you're using a debugger, things aren't going your way. With that in mind, Delve should stay out of your way as much as possible.
Security Fix(es):
* net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811)
* crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries (CVE-2026-27145)
Bug Fix(es) and Enhancement(s):
* Update Delve to 1.26 [rhel-10.0.z] (JIRA:RHEL-213072)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.
7.5 (High)
Affected products
Fixed
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-10.0.Z.E2S:delve-0:1.26.1-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:delve-0:1.26.1-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:delve-0:1.26.1-1.el10_0.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:delve-0:1.26.1-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:delve-debuginfo-0:1.26.1-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:delve-debuginfo-0:1.26.1-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:delve-debuginfo-0:1.26.1-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:delve-debugsource-0:1.26.1-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:delve-debugsource-0:1.26.1-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:delve-debugsource-0:1.26.1-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-10.0.Z.E2S:delve-0:1.26.1-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:delve-0:1.26.1-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:delve-0:1.26.1-1.el10_0.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:delve-0:1.26.1-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:delve-debuginfo-0:1.26.1-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:delve-debuginfo-0:1.26.1-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:delve-debuginfo-0:1.26.1-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:delve-debugsource-0:1.26.1-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:delve-debugsource-0:1.26.1-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:delve-debugsource-0:1.26.1-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
References
21 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for delve is now available for Red Hat Enterprise Linux 10.0 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Delve is a debugger for the Go programming language. The goal of the project is to provide a simple, full featured debugging tool for Go. Delve should be easy to invoke and easy to use. Chances are if you\u0027re using a debugger, things aren\u0027t going your way. With that in mind, Delve should stay out of your way as much as possible.\n\nSecurity Fix(es):\n\n* net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811)\n\n* crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries (CVE-2026-27145)\n\nBug Fix(es) and Enhancement(s):\n\n* Update Delve to 1.26 [rhel-10.0.z] (JIRA:RHEL-213072)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:49703",
"url": "https://access.redhat.com/errata/RHSA-2026:49703"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "2484207",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_49703.json"
}
],
"title": "Red Hat Security Advisory: delve security, bug fix, and enhancement update",
"tracking": {
"current_release_date": "2026-08-26T04:26:31+00:00",
"generator": {
"date": "2026-08-26T04:26:31+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:49703",
"initial_release_date": "2026-08-03T16:15:57+00:00",
"revision_history": [
{
"date": "2026-08-03T16:15:57+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-03T16:15:57+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-26T04:26:31+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product": {
"name": "Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux_eus:10.0"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "delve-0:1.26.1-1.el10_0.src",
"product": {
"name": "delve-0:1.26.1-1.el10_0.src",
"product_id": "delve-0:1.26.1-1.el10_0.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/delve@1.26.1-1.el10_0?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "delve-0:1.26.1-1.el10_0.aarch64",
"product": {
"name": "delve-0:1.26.1-1.el10_0.aarch64",
"product_id": "delve-0:1.26.1-1.el10_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/delve@1.26.1-1.el10_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "delve-debugsource-0:1.26.1-1.el10_0.aarch64",
"product": {
"name": "delve-debugsource-0:1.26.1-1.el10_0.aarch64",
"product_id": "delve-debugsource-0:1.26.1-1.el10_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/delve-debugsource@1.26.1-1.el10_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "delve-debuginfo-0:1.26.1-1.el10_0.aarch64",
"product": {
"name": "delve-debuginfo-0:1.26.1-1.el10_0.aarch64",
"product_id": "delve-debuginfo-0:1.26.1-1.el10_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/delve-debuginfo@1.26.1-1.el10_0?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "delve-0:1.26.1-1.el10_0.ppc64le",
"product": {
"name": "delve-0:1.26.1-1.el10_0.ppc64le",
"product_id": "delve-0:1.26.1-1.el10_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/delve@1.26.1-1.el10_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "delve-debugsource-0:1.26.1-1.el10_0.ppc64le",
"product": {
"name": "delve-debugsource-0:1.26.1-1.el10_0.ppc64le",
"product_id": "delve-debugsource-0:1.26.1-1.el10_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/delve-debugsource@1.26.1-1.el10_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "delve-debuginfo-0:1.26.1-1.el10_0.ppc64le",
"product": {
"name": "delve-debuginfo-0:1.26.1-1.el10_0.ppc64le",
"product_id": "delve-debuginfo-0:1.26.1-1.el10_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/delve-debuginfo@1.26.1-1.el10_0?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "delve-0:1.26.1-1.el10_0.x86_64",
"product": {
"name": "delve-0:1.26.1-1.el10_0.x86_64",
"product_id": "delve-0:1.26.1-1.el10_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/delve@1.26.1-1.el10_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "delve-debugsource-0:1.26.1-1.el10_0.x86_64",
"product": {
"name": "delve-debugsource-0:1.26.1-1.el10_0.x86_64",
"product_id": "delve-debugsource-0:1.26.1-1.el10_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/delve-debugsource@1.26.1-1.el10_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "delve-debuginfo-0:1.26.1-1.el10_0.x86_64",
"product": {
"name": "delve-debuginfo-0:1.26.1-1.el10_0.x86_64",
"product_id": "delve-debuginfo-0:1.26.1-1.el10_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/delve-debuginfo@1.26.1-1.el10_0?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "delve-0:1.26.1-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:delve-0:1.26.1-1.el10_0.aarch64"
},
"product_reference": "delve-0:1.26.1-1.el10_0.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "delve-0:1.26.1-1.el10_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:delve-0:1.26.1-1.el10_0.ppc64le"
},
"product_reference": "delve-0:1.26.1-1.el10_0.ppc64le",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "delve-0:1.26.1-1.el10_0.src as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:delve-0:1.26.1-1.el10_0.src"
},
"product_reference": "delve-0:1.26.1-1.el10_0.src",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "delve-0:1.26.1-1.el10_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:delve-0:1.26.1-1.el10_0.x86_64"
},
"product_reference": "delve-0:1.26.1-1.el10_0.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "delve-debuginfo-0:1.26.1-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:delve-debuginfo-0:1.26.1-1.el10_0.aarch64"
},
"product_reference": "delve-debuginfo-0:1.26.1-1.el10_0.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "delve-debuginfo-0:1.26.1-1.el10_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:delve-debuginfo-0:1.26.1-1.el10_0.ppc64le"
},
"product_reference": "delve-debuginfo-0:1.26.1-1.el10_0.ppc64le",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "delve-debuginfo-0:1.26.1-1.el10_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:delve-debuginfo-0:1.26.1-1.el10_0.x86_64"
},
"product_reference": "delve-debuginfo-0:1.26.1-1.el10_0.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "delve-debugsource-0:1.26.1-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:delve-debugsource-0:1.26.1-1.el10_0.aarch64"
},
"product_reference": "delve-debugsource-0:1.26.1-1.el10_0.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "delve-debugsource-0:1.26.1-1.el10_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:delve-debugsource-0:1.26.1-1.el10_0.ppc64le"
},
"product_reference": "delve-debugsource-0:1.26.1-1.el10_0.ppc64le",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "delve-debugsource-0:1.26.1-1.el10_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:delve-debugsource-0:1.26.1-1.el10_0.x86_64"
},
"product_reference": "delve-debugsource-0:1.26.1-1.el10_0.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-27145",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-06-02T23:01:08.992540+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484207"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.0.Z.E2S:delve-0:1.26.1-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:delve-0:1.26.1-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:delve-0:1.26.1-1.el10_0.src",
"AppStream-10.0.Z.E2S:delve-0:1.26.1-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:delve-debuginfo-0:1.26.1-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:delve-debuginfo-0:1.26.1-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:delve-debuginfo-0:1.26.1-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:delve-debugsource-0:1.26.1-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:delve-debugsource-0:1.26.1-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:delve-debugsource-0:1.26.1-1.el10_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "RHBZ#2484207",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27145",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27145"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://go.dev/cl/783621",
"url": "https://go.dev/cl/783621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79694",
"url": "https://go.dev/issue/79694"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5037",
"url": "https://pkg.go.dev/vuln/GO-2026-5037"
}
],
"release_date": "2026-06-02T22:01:36.954000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T16:15:57+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.0.Z.E2S:delve-0:1.26.1-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:delve-0:1.26.1-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:delve-0:1.26.1-1.el10_0.src",
"AppStream-10.0.Z.E2S:delve-0:1.26.1-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:delve-debuginfo-0:1.26.1-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:delve-debuginfo-0:1.26.1-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:delve-debuginfo-0:1.26.1-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:delve-debugsource-0:1.26.1-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:delve-debugsource-0:1.26.1-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:delve-debugsource-0:1.26.1-1.el10_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49703"
},
{
"category": "workaround",
"details": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"product_ids": [
"AppStream-10.0.Z.E2S:delve-0:1.26.1-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:delve-0:1.26.1-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:delve-0:1.26.1-1.el10_0.src",
"AppStream-10.0.Z.E2S:delve-0:1.26.1-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:delve-debuginfo-0:1.26.1-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:delve-debuginfo-0:1.26.1-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:delve-debuginfo-0:1.26.1-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:delve-debugsource-0:1.26.1-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:delve-debugsource-0:1.26.1-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:delve-debugsource-0:1.26.1-1.el10_0.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.0.Z.E2S:delve-0:1.26.1-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:delve-0:1.26.1-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:delve-0:1.26.1-1.el10_0.src",
"AppStream-10.0.Z.E2S:delve-0:1.26.1-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:delve-debuginfo-0:1.26.1-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:delve-debuginfo-0:1.26.1-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:delve-debuginfo-0:1.26.1-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:delve-debugsource-0:1.26.1-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:delve-debugsource-0:1.26.1-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:delve-debugsource-0:1.26.1-1.el10_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.0.Z.E2S:delve-0:1.26.1-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:delve-0:1.26.1-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:delve-0:1.26.1-1.el10_0.src",
"AppStream-10.0.Z.E2S:delve-0:1.26.1-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:delve-debuginfo-0:1.26.1-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:delve-debuginfo-0:1.26.1-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:delve-debuginfo-0:1.26.1-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:delve-debugsource-0:1.26.1-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:delve-debugsource-0:1.26.1-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:delve-debugsource-0:1.26.1-1.el10_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T16:15:57+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.0.Z.E2S:delve-0:1.26.1-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:delve-0:1.26.1-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:delve-0:1.26.1-1.el10_0.src",
"AppStream-10.0.Z.E2S:delve-0:1.26.1-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:delve-debuginfo-0:1.26.1-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:delve-debuginfo-0:1.26.1-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:delve-debuginfo-0:1.26.1-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:delve-debugsource-0:1.26.1-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:delve-debugsource-0:1.26.1-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:delve-debugsource-0:1.26.1-1.el10_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49703"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"AppStream-10.0.Z.E2S:delve-0:1.26.1-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:delve-0:1.26.1-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:delve-0:1.26.1-1.el10_0.src",
"AppStream-10.0.Z.E2S:delve-0:1.26.1-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:delve-debuginfo-0:1.26.1-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:delve-debuginfo-0:1.26.1-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:delve-debuginfo-0:1.26.1-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:delve-debugsource-0:1.26.1-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:delve-debugsource-0:1.26.1-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:delve-debugsource-0:1.26.1-1.el10_0.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.0.Z.E2S:delve-0:1.26.1-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:delve-0:1.26.1-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:delve-0:1.26.1-1.el10_0.src",
"AppStream-10.0.Z.E2S:delve-0:1.26.1-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:delve-debuginfo-0:1.26.1-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:delve-debuginfo-0:1.26.1-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:delve-debuginfo-0:1.26.1-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:delve-debugsource-0:1.26.1-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:delve-debugsource-0:1.26.1-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:delve-debugsource-0:1.26.1-1.el10_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
}
]
}
RHSA-2026:49712
Vulnerability from csaf_redhat - Published: 2026-08-03 17:42 - Updated: 2026-08-26 04:26Summary
Red Hat Security Advisory: golang security update
Severity
Important
Notes
Topic: An update for golang is now available for Red Hat Enterprise Linux 9.6 Extended Update Support.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: The golang packages provide the Go programming language compiler.
Security Fix(es):
* net/mail: golang: net/mail: Denial of Service via pathological email address parsing (CVE-2026-42499)
* cmd/go: golang: Go command (cmd/go): Integrity bypass due to checksum validation flaw via malicious module proxy (CVE-2026-42501)
* html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content (CVE-2026-39823)
* cmd/go: golang: Go 'go bug' command: Arbitrary file overwrite via symlink attack (CVE-2026-39819)
* net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame (CVE-2026-33814)
* net/mail: golang: Go net/mail: Denial of Service via crafted email inputs (CVE-2026-39820)
* net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811)
* net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls (CVE-2026-39825)
* cmd/go: golang: Go tool pack: Arbitrary file write via malicious archive extraction (CVE-2026-39817)
* html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping (CVE-2026-39826)
* golang.org/x/net/idna: golang: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (CVE-2026-39821)
* net/textproto: golang: Golang net/textproto: Misleading error messages via input injection (CVE-2026-42507)
* crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries (CVE-2026-27145)
* os: golang: Go os.Root: Symlink following vulnerability allows directory traversal (CVE-2026-39822)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.
7.5 (High)
Affected products
Fixed
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in the HTTP/2 protocol implementation within the Go standard library (golang.org/x/net and net/http/internal/http2). A remote attacker can exploit this vulnerability by sending a specially crafted HTTP/2 SETTINGS frame with the SETTINGS_MAX_FRAME_SIZE parameter set to zero. This malicious frame causes the transport layer to enter an infinite loop of writing CONTINUATION frames, leading to resource exhaustion and a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in the "go tool pack" subcommand, a component of the Go programming language tools. This vulnerability allows an attacker to craft a malicious archive file. When this archive is extracted using the "pack" subcommand, it can lead to arbitrary file writes on the filesystem, potentially allowing an attacker to create or modify files in unintended locations.
5.9 (Medium)
Affected products
Fixed
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A flaw was found in the 'go bug' command within the Go programming language tools. This command writes to temporary files with predictable names. A local attacker with access to the system's temporary directory could exploit this by creating a symbolic link (symlink) with one of these predictable names. This would cause the 'go bug' command to overwrite the target of the symlink, potentially leading to arbitrary file overwrite.
4.4 (Medium)
Affected products
Fixed
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.
7.5 (High)
Affected products
Fixed
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in the `os.Root` functionality of Go on Unix systems. This vulnerability allows an attacker to bypass intended directory restrictions by crafting a path that ends with a symbolic link and a trailing slash. When a file is opened in `os.Root` with such a path, the symbolic link is improperly followed, potentially leading to access to locations outside of the defined root directory. This could result in information disclosure or unauthorized file system access.
7.8 (High)
Affected products
Fixed
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in the `html/template` package of Go. A remote attacker could exploit this vulnerability by inserting ASCII whitespaces around the equals sign (`=`) within a URL's content attribute inside a `<meta>` tag. This improper escaping could lead to Cross-Site Scripting (XSS), allowing the attacker to execute malicious scripts in the user's browser.
5.4 (Medium)
Affected products
Fixed
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in the `net/http/httputil` package, specifically within the `ReverseProxy` component. This vulnerability allows the `ReverseProxy` to forward query parameters that are not visible to `Rewrite` functions. This occurs because the `ReverseProxy` does not correctly consider the `url.ParseQuery` limit on the total number of query parameters. A remote attacker could exploit this to send hidden query parameters, potentially bypassing security policies or controls implemented by `Rewrite` functions, leading to information disclosure or unexpected behavior.
6.5 (Medium)
Affected products
Fixed
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in html/template. A trusted template author could craft a script tag with an empty or whitespace-only 'type' attribute. This vulnerability causes the template engine to incorrectly escape data passed into the script block, potentially leading to cross-site scripting (XSS). An attacker could leverage this to execute arbitrary client-side scripts in a user's browser.
5.4 (Medium)
Affected products
Fixed
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in the Go command (`cmd/go`). A malicious module proxy can exploit this vulnerability by bypassing the validation of module checksums. This allows the proxy to serve altered versions of the Go toolchain, which the `go` command may then download and execute without proper verification. This can lead to the execution of untrusted code, compromising the integrity of the Go development environment.
5.3 (Medium)
Affected products
Fixed
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in the net/textproto package in Golang. When functions in this package return errors, they include their input as part of the error message. An attacker could exploit this by injecting misleading content into these error messages, which are then printed or logged. This could lead to confusion or misinterpretation of critical system information.
5.3 (Medium)
Affected products
Fixed
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
References
120 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for golang is now available for Red Hat Enterprise Linux 9.6 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The golang packages provide the Go programming language compiler.\n\nSecurity Fix(es):\n\n* net/mail: golang: net/mail: Denial of Service via pathological email address parsing (CVE-2026-42499)\n\n* cmd/go: golang: Go command (cmd/go): Integrity bypass due to checksum validation flaw via malicious module proxy (CVE-2026-42501)\n\n* html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content (CVE-2026-39823)\n\n* cmd/go: golang: Go \u0027go bug\u0027 command: Arbitrary file overwrite via symlink attack (CVE-2026-39819)\n\n* net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame (CVE-2026-33814)\n\n* net/mail: golang: Go net/mail: Denial of Service via crafted email inputs (CVE-2026-39820)\n\n* net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811)\n\n* net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls (CVE-2026-39825)\n\n* cmd/go: golang: Go tool pack: Arbitrary file write via malicious archive extraction (CVE-2026-39817)\n\n* html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping (CVE-2026-39826)\n\n* golang.org/x/net/idna: golang: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (CVE-2026-39821)\n\n* net/textproto: golang: Golang net/textproto: Misleading error messages via input injection (CVE-2026-42507)\n\n* crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries (CVE-2026-27145)\n\n* os: golang: Go os.Root: Symlink following vulnerability allows directory traversal (CVE-2026-39822)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:49712",
"url": "https://access.redhat.com/errata/RHSA-2026:49712"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2467809",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467809"
},
{
"category": "external",
"summary": "2467810",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467810"
},
{
"category": "external",
"summary": "2467811",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467811"
},
{
"category": "external",
"summary": "2467813",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467813"
},
{
"category": "external",
"summary": "2467815",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467815"
},
{
"category": "external",
"summary": "2467820",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467820"
},
{
"category": "external",
"summary": "2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "2467823",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467823"
},
{
"category": "external",
"summary": "2467825",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467825"
},
{
"category": "external",
"summary": "2467826",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467826"
},
{
"category": "external",
"summary": "2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "2484205",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484205"
},
{
"category": "external",
"summary": "2484207",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
},
{
"category": "external",
"summary": "2498152",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498152"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_49712.json"
}
],
"title": "Red Hat Security Advisory: golang security update",
"tracking": {
"current_release_date": "2026-08-26T04:26:32+00:00",
"generator": {
"date": "2026-08-26T04:26:32+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:49712",
"initial_release_date": "2026-08-03T17:42:42+00:00",
"revision_history": [
{
"date": "2026-08-03T17:42:42+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-03T17:42:42+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-26T04:26:32+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product": {
"name": "Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_eus:9.6::appstream"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "go-toolset-0:1.26.5-1.el9_6.aarch64",
"product": {
"name": "go-toolset-0:1.26.5-1.el9_6.aarch64",
"product_id": "go-toolset-0:1.26.5-1.el9_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/go-toolset@1.26.5-1.el9_6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "golang-0:1.26.5-1.el9_6.aarch64",
"product": {
"name": "golang-0:1.26.5-1.el9_6.aarch64",
"product_id": "golang-0:1.26.5-1.el9_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang@1.26.5-1.el9_6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "golang-bin-0:1.26.5-1.el9_6.aarch64",
"product": {
"name": "golang-bin-0:1.26.5-1.el9_6.aarch64",
"product_id": "golang-bin-0:1.26.5-1.el9_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang-bin@1.26.5-1.el9_6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "golang-race-0:1.26.5-1.el9_6.aarch64",
"product": {
"name": "golang-race-0:1.26.5-1.el9_6.aarch64",
"product_id": "golang-race-0:1.26.5-1.el9_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang-race@1.26.5-1.el9_6?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "go-toolset-0:1.26.5-1.el9_6.ppc64le",
"product": {
"name": "go-toolset-0:1.26.5-1.el9_6.ppc64le",
"product_id": "go-toolset-0:1.26.5-1.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/go-toolset@1.26.5-1.el9_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "golang-0:1.26.5-1.el9_6.ppc64le",
"product": {
"name": "golang-0:1.26.5-1.el9_6.ppc64le",
"product_id": "golang-0:1.26.5-1.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang@1.26.5-1.el9_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "golang-bin-0:1.26.5-1.el9_6.ppc64le",
"product": {
"name": "golang-bin-0:1.26.5-1.el9_6.ppc64le",
"product_id": "golang-bin-0:1.26.5-1.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang-bin@1.26.5-1.el9_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "golang-race-0:1.26.5-1.el9_6.ppc64le",
"product": {
"name": "golang-race-0:1.26.5-1.el9_6.ppc64le",
"product_id": "golang-race-0:1.26.5-1.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang-race@1.26.5-1.el9_6?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "go-toolset-0:1.26.5-1.el9_6.x86_64",
"product": {
"name": "go-toolset-0:1.26.5-1.el9_6.x86_64",
"product_id": "go-toolset-0:1.26.5-1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/go-toolset@1.26.5-1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "golang-0:1.26.5-1.el9_6.x86_64",
"product": {
"name": "golang-0:1.26.5-1.el9_6.x86_64",
"product_id": "golang-0:1.26.5-1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang@1.26.5-1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "golang-bin-0:1.26.5-1.el9_6.x86_64",
"product": {
"name": "golang-bin-0:1.26.5-1.el9_6.x86_64",
"product_id": "golang-bin-0:1.26.5-1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang-bin@1.26.5-1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "golang-race-0:1.26.5-1.el9_6.x86_64",
"product": {
"name": "golang-race-0:1.26.5-1.el9_6.x86_64",
"product_id": "golang-race-0:1.26.5-1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang-race@1.26.5-1.el9_6?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "go-toolset-0:1.26.5-1.el9_6.s390x",
"product": {
"name": "go-toolset-0:1.26.5-1.el9_6.s390x",
"product_id": "go-toolset-0:1.26.5-1.el9_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/go-toolset@1.26.5-1.el9_6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "golang-0:1.26.5-1.el9_6.s390x",
"product": {
"name": "golang-0:1.26.5-1.el9_6.s390x",
"product_id": "golang-0:1.26.5-1.el9_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang@1.26.5-1.el9_6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "golang-bin-0:1.26.5-1.el9_6.s390x",
"product": {
"name": "golang-bin-0:1.26.5-1.el9_6.s390x",
"product_id": "golang-bin-0:1.26.5-1.el9_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang-bin@1.26.5-1.el9_6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "golang-race-0:1.26.5-1.el9_6.s390x",
"product": {
"name": "golang-race-0:1.26.5-1.el9_6.s390x",
"product_id": "golang-race-0:1.26.5-1.el9_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang-race@1.26.5-1.el9_6?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "golang-0:1.26.5-1.el9_6.src",
"product": {
"name": "golang-0:1.26.5-1.el9_6.src",
"product_id": "golang-0:1.26.5-1.el9_6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang@1.26.5-1.el9_6?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "golang-docs-0:1.26.5-1.el9_6.noarch",
"product": {
"name": "golang-docs-0:1.26.5-1.el9_6.noarch",
"product_id": "golang-docs-0:1.26.5-1.el9_6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang-docs@1.26.5-1.el9_6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "golang-misc-0:1.26.5-1.el9_6.noarch",
"product": {
"name": "golang-misc-0:1.26.5-1.el9_6.noarch",
"product_id": "golang-misc-0:1.26.5-1.el9_6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang-misc@1.26.5-1.el9_6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "golang-src-0:1.26.5-1.el9_6.noarch",
"product": {
"name": "golang-src-0:1.26.5-1.el9_6.noarch",
"product_id": "golang-src-0:1.26.5-1.el9_6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang-src@1.26.5-1.el9_6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "golang-tests-0:1.26.5-1.el9_6.noarch",
"product": {
"name": "golang-tests-0:1.26.5-1.el9_6.noarch",
"product_id": "golang-tests-0:1.26.5-1.el9_6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang-tests@1.26.5-1.el9_6?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "go-toolset-0:1.26.5-1.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64"
},
"product_reference": "go-toolset-0:1.26.5-1.el9_6.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go-toolset-0:1.26.5-1.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le"
},
"product_reference": "go-toolset-0:1.26.5-1.el9_6.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go-toolset-0:1.26.5-1.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x"
},
"product_reference": "go-toolset-0:1.26.5-1.el9_6.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go-toolset-0:1.26.5-1.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64"
},
"product_reference": "go-toolset-0:1.26.5-1.el9_6.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-0:1.26.5-1.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64"
},
"product_reference": "golang-0:1.26.5-1.el9_6.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-0:1.26.5-1.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le"
},
"product_reference": "golang-0:1.26.5-1.el9_6.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-0:1.26.5-1.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x"
},
"product_reference": "golang-0:1.26.5-1.el9_6.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-0:1.26.5-1.el9_6.src as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src"
},
"product_reference": "golang-0:1.26.5-1.el9_6.src",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-0:1.26.5-1.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64"
},
"product_reference": "golang-0:1.26.5-1.el9_6.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-bin-0:1.26.5-1.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64"
},
"product_reference": "golang-bin-0:1.26.5-1.el9_6.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-bin-0:1.26.5-1.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le"
},
"product_reference": "golang-bin-0:1.26.5-1.el9_6.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-bin-0:1.26.5-1.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x"
},
"product_reference": "golang-bin-0:1.26.5-1.el9_6.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-bin-0:1.26.5-1.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64"
},
"product_reference": "golang-bin-0:1.26.5-1.el9_6.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-docs-0:1.26.5-1.el9_6.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch"
},
"product_reference": "golang-docs-0:1.26.5-1.el9_6.noarch",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-misc-0:1.26.5-1.el9_6.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch"
},
"product_reference": "golang-misc-0:1.26.5-1.el9_6.noarch",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-race-0:1.26.5-1.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64"
},
"product_reference": "golang-race-0:1.26.5-1.el9_6.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-race-0:1.26.5-1.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le"
},
"product_reference": "golang-race-0:1.26.5-1.el9_6.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-race-0:1.26.5-1.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x"
},
"product_reference": "golang-race-0:1.26.5-1.el9_6.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-race-0:1.26.5-1.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64"
},
"product_reference": "golang-race-0:1.26.5-1.el9_6.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-src-0:1.26.5-1.el9_6.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch"
},
"product_reference": "golang-src-0:1.26.5-1.el9_6.noarch",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-tests-0:1.26.5-1.el9_6.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
},
"product_reference": "golang-tests-0:1.26.5-1.el9_6.noarch",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-27145",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-06-02T23:01:08.992540+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484207"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "RHBZ#2484207",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27145",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27145"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://go.dev/cl/783621",
"url": "https://go.dev/cl/783621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79694",
"url": "https://go.dev/issue/79694"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5037",
"url": "https://pkg.go.dev/vuln/GO-2026-5037"
}
],
"release_date": "2026-06-02T22:01:36.954000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T17:42:42+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49712"
},
{
"category": "workaround",
"details": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"product_ids": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T17:42:42+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49712"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-33814",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-07T20:01:11.324941+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467815"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the HTTP/2 protocol implementation within the Go standard library (golang.org/x/net and net/http/internal/http2). A remote attacker can exploit this vulnerability by sending a specially crafted HTTP/2 SETTINGS frame with the SETTINGS_MAX_FRAME_SIZE parameter set to zero. This malicious frame causes the transport layer to enter an infinite loop of writing CONTINUATION frames, leading to resource exhaustion and a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important denial of service flaw in the Go HTTP/2 protocol implementation allows a remote, unauthenticated attacker to exhaust system resources. By sending a specially crafted HTTP/2 SETTINGS frame with a zero-value SETTINGS_MAX_FRAME_SIZE, the vulnerable Go library enters an infinite loop, impacting the availability of services utilizing HTTP/2.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33814"
},
{
"category": "external",
"summary": "RHBZ#2467815",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467815"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33814",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33814"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33814",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33814"
},
{
"category": "external",
"summary": "https://go.dev/cl/761581",
"url": "https://go.dev/cl/761581"
},
{
"category": "external",
"summary": "https://go.dev/cl/761640",
"url": "https://go.dev/cl/761640"
},
{
"category": "external",
"summary": "https://go.dev/issue/78476",
"url": "https://go.dev/issue/78476"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4918",
"url": "https://pkg.go.dev/vuln/GO-2026-4918"
}
],
"release_date": "2026-05-07T19:41:17.631000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T17:42:42+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49712"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame"
},
{
"cve": "CVE-2026-39817",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-05-07T20:01:43.510043+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467825"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the \"go tool pack\" subcommand, a component of the Go programming language tools. This vulnerability allows an attacker to craft a malicious archive file. When this archive is extracted using the \"pack\" subcommand, it can lead to arbitrary file writes on the filesystem, potentially allowing an attacker to create or modify files in unintended locations.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "cmd/go: golang: Go tool pack: Arbitrary file write via malicious archive extraction",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39817"
},
{
"category": "external",
"summary": "RHBZ#2467825",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467825"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39817",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39817"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39817",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39817"
},
{
"category": "external",
"summary": "https://go.dev/cl/767520",
"url": "https://go.dev/cl/767520"
},
{
"category": "external",
"summary": "https://go.dev/issue/78778",
"url": "https://go.dev/issue/78778"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4979",
"url": "https://pkg.go.dev/vuln/GO-2026-4979"
}
],
"release_date": "2026-05-07T19:41:18.993000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T17:42:42+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49712"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "cmd/go: golang: Go tool pack: Arbitrary file write via malicious archive extraction"
},
{
"cve": "CVE-2026-39819",
"cwe": {
"id": "CWE-59",
"name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
},
"discovery_date": "2026-05-07T20:01:04.403877+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467813"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the \u0027go bug\u0027 command within the Go programming language tools. This command writes to temporary files with predictable names. A local attacker with access to the system\u0027s temporary directory could exploit this by creating a symbolic link (symlink) with one of these predictable names. This would cause the \u0027go bug\u0027 command to overwrite the target of the symlink, potentially leading to arbitrary file overwrite.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "cmd/go: golang: Go \u0027go bug\u0027 command: Arbitrary file overwrite via symlink attack",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39819"
},
{
"category": "external",
"summary": "RHBZ#2467813",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467813"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39819",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39819"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39819",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39819"
},
{
"category": "external",
"summary": "https://go.dev/cl/763882",
"url": "https://go.dev/cl/763882"
},
{
"category": "external",
"summary": "https://go.dev/issue/78584",
"url": "https://go.dev/issue/78584"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4978",
"url": "https://pkg.go.dev/vuln/GO-2026-4978"
}
],
"release_date": "2026-05-07T19:41:18.849000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T17:42:42+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49712"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "cmd/go: golang: Go \u0027go bug\u0027 command: Arbitrary file overwrite via symlink attack"
},
{
"cve": "CVE-2026-39820",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-07T20:01:27.800929+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467820"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net/mail` package. Applications processing untrusted email inputs via `ParseAddress`, `ParseAddressList`, or `ParseDate` functions are susceptible to excessive resource consumption, which can lead to service unavailability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "RHBZ#2467820",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467820"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39820",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://go.dev/cl/759940",
"url": "https://go.dev/cl/759940"
},
{
"category": "external",
"summary": "https://go.dev/issue/78566",
"url": "https://go.dev/issue/78566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4986",
"url": "https://pkg.go.dev/vuln/GO-2026-4986"
}
],
"release_date": "2026-05-07T19:41:19.854000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T17:42:42+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49712"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T17:42:42+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49712"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-39822",
"cwe": {
"id": "CWE-59",
"name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
},
"discovery_date": "2026-07-08T17:01:53.592869+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2498152"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `os.Root` functionality of Go on Unix systems. This vulnerability allows an attacker to bypass intended directory restrictions by crafting a path that ends with a symbolic link and a trailing slash. When a file is opened in `os.Root` with such a path, the symbolic link is improperly followed, potentially leading to access to locations outside of the defined root directory. This could result in information disclosure or unauthorized file system access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: Go os.Root: Symlink following vulnerability allows directory traversal",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in Go\u0027s os.Root implementation. On Unix systems, `os.Root.Open()` improperly follows symlinks to locations outside the root directory when the path ends with a trailing slash (e.g., root.Open(\"symlink/\")). This is because `openat()` with `O_NOFOLLOW` does not prevent symlink resolution when the path has a trailing /. An attacker able to create symlinks within an os.Root directory could use this to read or write files outside the intended root. The os.Root API was introduced in Go 1.24. Go versions prior to 1.24 are not affected. This issue is fixed in Go 1.25.12 and Go 1.26.5.\n\nThe following symbols are affected:\n* `OpenInRoot`: Opens a file or directory within an `os.Root`.\n* `Root.Create`: Creates a file inside an `os.Root`.\n* `Root.Open`: Opens a path relative to an `os.Root`.\n* `Root.OpenFile`: Opens a file with specified flags and permissions inside an `os.Root`.\n* `Root.OpenRoot`: Opens a sub-root directory from an `os.Root`.\n* `Root.ReadFile`: Reads a file inside an `os.Root`.\n* `Root.WriteFile`: Writes a file inside an `os.Root`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39822"
},
{
"category": "external",
"summary": "RHBZ#2498152",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498152"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39822",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39822"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39822",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39822"
},
{
"category": "external",
"summary": "https://go.dev/cl/797880",
"url": "https://go.dev/cl/797880"
},
{
"category": "external",
"summary": "https://go.dev/issue/79005",
"url": "https://go.dev/issue/79005"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/OrmQE_Yp5Sc",
"url": "https://groups.google.com/g/golang-announce/c/OrmQE_Yp5Sc"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4970",
"url": "https://pkg.go.dev/vuln/GO-2026-4970"
}
],
"release_date": "2026-07-08T15:46:27.199000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T17:42:42+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49712"
},
{
"category": "workaround",
"details": "There is no mitigation for this issue other than updating the Go toolchain to Go 1.25.12 or Go 1.26.5. Programs compiled with Go \u003e= 1.24 that do not use the os.Root API are not affected by this vulnerability.\nThe os.Root API was introduced in Go 1.24. Go versions prior to 1.24 are not affected.\nThis issue is fixed in Go 1.25.12 and Go 1.26.5.",
"product_ids": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang: Go os.Root: Symlink following vulnerability allows directory traversal"
},
{
"cve": "CVE-2026-39823",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-07T20:00:58.284024+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467811"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `html/template` package of Go. A remote attacker could exploit this vulnerability by inserting ASCII whitespaces around the equals sign (`=`) within a URL\u0027s content attribute inside a `\u003cmeta\u003e` tag. This improper escaping could lead to Cross-Site Scripting (XSS), allowing the attacker to execute malicious scripts in the user\u0027s browser.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat products ship the Go `html/template` package as a dependency of various Go-based components. The affected functionality involves URL escaping inside `\u003cmeta\u003e` tag content attributes, which requires an application to render user-controlled URLs in meta tags using `html/template`. While the vulnerable code is present, exploitation requires a specific usage pattern that is uncommon in Red Hat product code paths.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39823"
},
{
"category": "external",
"summary": "RHBZ#2467811",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467811"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39823",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39823"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39823",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39823"
},
{
"category": "external",
"summary": "https://go.dev/cl/769920",
"url": "https://go.dev/cl/769920"
},
{
"category": "external",
"summary": "https://go.dev/issue/78913",
"url": "https://go.dev/issue/78913"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4982",
"url": "https://pkg.go.dev/vuln/GO-2026-4982"
}
],
"release_date": "2026-05-07T19:41:19.524000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T17:42:42+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49712"
},
{
"category": "workaround",
"details": "Ensure that user-supplied URLs are validated and sanitized before being passed to Go\u0027s `html/template` package for rendering in HTML meta tag content attributes. Avoid rendering untrusted URL data directly in meta tag content attributes.",
"product_ids": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content"
},
{
"cve": "CVE-2026-39825",
"cwe": {
"id": "CWE-472",
"name": "External Control of Assumed-Immutable Web Parameter"
},
"discovery_date": "2026-05-07T20:01:37.714133+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467823"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/http/httputil` package, specifically within the `ReverseProxy` component. This vulnerability allows the `ReverseProxy` to forward query parameters that are not visible to `Rewrite` functions. This occurs because the `ReverseProxy` does not correctly consider the `url.ParseQuery` limit on the total number of query parameters. A remote attacker could exploit this to send hidden query parameters, potentially bypassing security policies or controls implemented by `Rewrite` functions, leading to information disclosure or unexpected behavior.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in Go\u0027s net/http/httputil package where ReverseProxy can forward query parameters that are hidden from Rewrite or Director functions. This occurs when the number of query parameters exceeds the url.ParseQuery limit (controlled by the GODEBUG setting urlmaxqueryparams). While Red Hat ships Go-based components across many products, exploitation requires that an application use ReverseProxy with a Rewrite or Director function that relies on query parameter inspection for security enforcement, which limits the practical impact of this vulnerability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39825"
},
{
"category": "external",
"summary": "RHBZ#2467823",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467823"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39825",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39825"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39825",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39825"
},
{
"category": "external",
"summary": "https://go.dev/cl/770541",
"url": "https://go.dev/cl/770541"
},
{
"category": "external",
"summary": "https://go.dev/issue/78948",
"url": "https://go.dev/issue/78948"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4976",
"url": "https://pkg.go.dev/vuln/GO-2026-4976"
}
],
"release_date": "2026-05-07T19:41:18.453000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T17:42:42+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49712"
},
{
"category": "workaround",
"details": "Increase the maximum number of query parameters allowed by setting the GODEBUG environment variable `urlmaxqueryparams` to a higher value (e.g., `GODEBUG=urlmaxqueryparams=20000`), or validate and enforce security controls on query parameters at the backend service rather than relying solely on the ReverseProxy\u0027s Rewrite or Director function for security filtering.",
"product_ids": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls"
},
{
"cve": "CVE-2026-39826",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-07T20:01:46.305827+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467826"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in html/template. A trusted template author could craft a script tag with an empty or whitespace-only \u0027type\u0027 attribute. This vulnerability causes the template engine to incorrectly escape data passed into the script block, potentially leading to cross-site scripting (XSS). An attacker could leverage this to execute arbitrary client-side scripts in a user\u0027s browser.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39826"
},
{
"category": "external",
"summary": "RHBZ#2467826",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467826"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39826",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39826"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39826",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39826"
},
{
"category": "external",
"summary": "https://go.dev/cl/771180",
"url": "https://go.dev/cl/771180"
},
{
"category": "external",
"summary": "https://go.dev/issue/78981",
"url": "https://go.dev/issue/78981"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4980",
"url": "https://pkg.go.dev/vuln/GO-2026-4980"
}
],
"release_date": "2026-05-07T19:41:19.138000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T17:42:42+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49712"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping"
},
{
"cve": "CVE-2026-42499",
"cwe": {
"id": "CWE-1046",
"name": "Creation of Immutable Text Using String Concatenation"
},
"discovery_date": "2026-05-07T20:00:51.685602+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467809"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `net/mail` package of the Go standard library. A remote attacker can exploit this flaw by sending specially crafted email addresses, leading to excessive resource consumption and a denial of service in Go applications that parse email addresses using the affected library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "RHBZ#2467809",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467809"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42499",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42499"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://go.dev/cl/771520",
"url": "https://go.dev/cl/771520"
},
{
"category": "external",
"summary": "https://go.dev/issue/78987",
"url": "https://go.dev/issue/78987"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4977",
"url": "https://pkg.go.dev/vuln/GO-2026-4977"
}
],
"release_date": "2026-05-07T19:41:18.615000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T17:42:42+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49712"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing"
},
{
"cve": "CVE-2026-42501",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-05-07T20:00:54.811489+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467810"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Go command (`cmd/go`). A malicious module proxy can exploit this vulnerability by bypassing the validation of module checksums. This allows the proxy to serve altered versions of the Go toolchain, which the `go` command may then download and execute without proper verification. This can lead to the execution of untrusted code, compromising the integrity of the Go development environment.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "cmd/go: golang: Go command (cmd/go): Integrity bypass due to checksum validation flaw via malicious module proxy",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Moderate impact flaw in the Go command (`cmd/go`) allows a malicious module proxy to bypass checksum validation, potentially leading to the execution of untrusted Go toolchains. Red Hat products utilizing the Go command are vulnerable if configured to use an untrusted module proxy or checksum database, as this could compromise the integrity of the Go development environment. Exploitation requires user interaction with a compromised proxy.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42501"
},
{
"category": "external",
"summary": "RHBZ#2467810",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467810"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42501",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42501"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42501",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42501"
},
{
"category": "external",
"summary": "https://go.dev/cl/775321",
"url": "https://go.dev/cl/775321"
},
{
"category": "external",
"summary": "https://go.dev/issue/79070",
"url": "https://go.dev/issue/79070"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4984",
"url": "https://pkg.go.dev/vuln/GO-2026-4984"
}
],
"release_date": "2026-05-07T19:41:19.691000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T17:42:42+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49712"
},
{
"category": "workaround",
"details": "To verify the integrity of Go module dependencies and detect potential tampering by a malicious proxy, users can revalidate all dependencies of the current module. This process involves removing the existing `go.sum` file and then re-generating and verifying module checksums.\n\nExecute the following commands in your module\u0027s root directory:\n```bash\nrm go.sum\ngo mod tidy\ngo mod verify\n```\nThis operation will re-download and re-verify all module dependencies. Be aware that this may affect your local module cache and could require re-building projects.",
"product_ids": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "cmd/go: golang: Go command (cmd/go): Integrity bypass due to checksum validation flaw via malicious module proxy"
},
{
"cve": "CVE-2026-42507",
"cwe": {
"id": "CWE-117",
"name": "Improper Output Neutralization for Logs"
},
"discovery_date": "2026-06-02T23:01:03.125126+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484205"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the net/textproto package in Golang. When functions in this package return errors, they include their input as part of the error message. An attacker could exploit this by injecting misleading content into these error messages, which are then printed or logged. This could lead to confusion or misinterpretation of critical system information.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/textproto: golang: Golang net/textproto: Misleading error messages via input injection",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42507"
},
{
"category": "external",
"summary": "RHBZ#2484205",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484205"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42507",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42507"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42507",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42507"
},
{
"category": "external",
"summary": "https://go.dev/cl/777060",
"url": "https://go.dev/cl/777060"
},
{
"category": "external",
"summary": "https://go.dev/issue/79346",
"url": "https://go.dev/issue/79346"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5039",
"url": "https://pkg.go.dev/vuln/GO-2026-5039"
}
],
"release_date": "2026-06-02T22:01:37.307000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T17:42:42+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49712"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "net/textproto: golang: Golang net/textproto: Misleading error messages via input injection"
}
]
}
RHSA-2026:49767
Vulnerability from csaf_redhat - Published: 2026-08-03 18:13 - Updated: 2026-08-26 04:26Summary
Red Hat Security Advisory: RHTAS 1.4.3 - CLI Stack Release
Severity
Important
Notes
Topic: The 1.4.3 release of the RHTAS CLIs.
For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4
Details: The RHTAS CLI Stack images for RHTAS 1.4.3
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.
8.8 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection's read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.
8.7 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/agent. The NewKeyring() function, which creates an in-memory keyring, failed to enforce the ConfirmBeforeUse constraint on keys. This allowed keys configured to require user confirmation before use to perform signing operations without any prompt or indication to the user. Consequently, an attacker could potentially bypass intended security controls, leading to unauthorized cryptographic signing actions.
5.5 (Medium)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Threats
Impact
Important
A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.
7.4 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.
7.1 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Threats
Impact
Important
References
126 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "The 1.4.3 release of the RHTAS CLIs.\nFor more details please visit the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4",
"title": "Topic"
},
{
"category": "general",
"text": "The RHTAS CLI Stack images for RHTAS 1.4.3",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:49767",
"url": "https://access.redhat.com/errata/RHSA-2026:49767"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4",
"url": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"url": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27145",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33811",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39820",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39828",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39829",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39830",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39832",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39833",
"url": "https://access.redhat.com/security/cve/CVE-2026-39833"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39835",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42151",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42499",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42508",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46595",
"url": "https://access.redhat.com/security/cve/CVE-2026-46595"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_49767.json"
}
],
"title": "Red Hat Security Advisory: RHTAS 1.4.3 - CLI Stack Release",
"tracking": {
"current_release_date": "2026-08-26T04:26:33+00:00",
"generator": {
"date": "2026-08-26T04:26:33+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:49767",
"initial_release_date": "2026-08-03T18:13:05+00:00",
"revision_history": [
{
"date": "2026-08-03T18:13:05+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-22T06:15:42+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-26T04:26:33+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Trusted Artifact Signer 1.4",
"product": {
"name": "Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:trusted_artifact_signer:1.4::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Trusted Artifact Signer"
},
{
"branches": [
{
"category": "product_version",
"name": "conforma-cli-stack-v1-4@amd64_darwin",
"product": {
"name": "conforma-cli-stack-v1-4@amd64_darwin",
"product_id": "conforma-cli-stack-v1-4@amd64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/conforma-cli-stack-v1-4@1.4.3?filename=ec_darwin_amd64.tar.gz\u0026checksum=sha256%3Ae75dc3d7df27fa5532642887c6a2989a5997507da4ff6677cc09b32b7d4f0cd0\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "cosign-cli-stack-v1-4@amd64_darwin",
"product": {
"name": "cosign-cli-stack-v1-4@amd64_darwin",
"product_id": "cosign-cli-stack-v1-4@amd64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/cosign-cli-stack-v1-4@1.4.3?filename=cosign_darwin_amd64.tar.gz\u0026checksum=sha256%3Ad6cc0d62c9f820ee8856ef2cf766cb981c0a898c1bc2e5da541298b92fe9f48d\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"product": {
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"product_id": "fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/fetch-tsa-certs-cli-stack-v1-4@1.4.3?filename=fetch_tsa_certs_darwin_amd64.tar.gz\u0026checksum=sha256%3A4dc2de8a2c12c9499f0101148b7864680b4c74bdf4fb44c02d2a7966e63b978d\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "gitsign-cli-stack-v1-4@amd64_darwin",
"product": {
"name": "gitsign-cli-stack-v1-4@amd64_darwin",
"product_id": "gitsign-cli-stack-v1-4@amd64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/gitsign-cli-stack-v1-4@1.4.3?filename=gitsign_cli_darwin_amd64.tar.gz\u0026checksum=sha256%3A6b8a2b930fbd3695d0555585c412594b30b2506d9f9acfb6b6339c742a91a6ba\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "model-transparency-cli-stack-v1-4@amd64_darwin",
"product": {
"name": "model-transparency-cli-stack-v1-4@amd64_darwin",
"product_id": "model-transparency-cli-stack-v1-4@amd64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/model-transparency-cli-stack-v1-4@1.4.3?filename=model_transparency_cli_darwin_amd64.tar.gz\u0026checksum=sha256%3A42582688ba3a4c6d1eebba9ffbc385f2f606ec376bac977395c6c31e9d27f575\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "rekor-cli-stack-v1-4@amd64_darwin",
"product": {
"name": "rekor-cli-stack-v1-4@amd64_darwin",
"product_id": "rekor-cli-stack-v1-4@amd64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/rekor-cli-stack-v1-4@1.4.3?filename=rekor_cli_darwin_amd64.tar.gz\u0026checksum=sha256%3Aca3361e621846d985e2b04e77138097cd679402c88ad5ee7aa281cc33e89a7fe\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "trillian-cli-stack-v1-4@amd64_darwin",
"product": {
"name": "trillian-cli-stack-v1-4@amd64_darwin",
"product_id": "trillian-cli-stack-v1-4@amd64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/trillian-cli-stack-v1-4@1.4.3?filename=createtree_darwin_amd64.tar.gz\u0026checksum=sha256%3Aac86c9f4eadfea26a37e04b62cd79b1fb4a51eccfaac17f2e1f8fefa1d3609e8\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
}
],
"category": "architecture",
"name": "amd64_darwin"
},
{
"branches": [
{
"category": "product_version",
"name": "conforma-cli-stack-v1-4@arm64_darwin",
"product": {
"name": "conforma-cli-stack-v1-4@arm64_darwin",
"product_id": "conforma-cli-stack-v1-4@arm64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/conforma-cli-stack-v1-4@1.4.3?filename=ec_darwin_arm64.tar.gz\u0026checksum=sha256%3Adf7bf266fd09164656e6e0b16935f1028dcd930d02868df452f76f073a766128\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "cosign-cli-stack-v1-4@arm64_darwin",
"product": {
"name": "cosign-cli-stack-v1-4@arm64_darwin",
"product_id": "cosign-cli-stack-v1-4@arm64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/cosign-cli-stack-v1-4@1.4.3?filename=cosign_darwin_arm64.tar.gz\u0026checksum=sha256%3Ac89bf59960c1cdc08f91266782e8261c9ec14f2e9a6a54ba2702febb6f3edcf8\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"product": {
"name": "fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"product_id": "fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/fetch-tsa-certs-cli-stack-v1-4@1.4.3?filename=fetch_tsa_certs_darwin_arm64.tar.gz\u0026checksum=sha256%3Adfed759f50eaf9ca63716d1517ec14ab32fe83f908a49432bee34b2b7fa12f74\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "gitsign-cli-stack-v1-4@arm64_darwin",
"product": {
"name": "gitsign-cli-stack-v1-4@arm64_darwin",
"product_id": "gitsign-cli-stack-v1-4@arm64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/gitsign-cli-stack-v1-4@1.4.3?filename=gitsign_cli_darwin_arm64.tar.gz\u0026checksum=sha256%3Ab5c0783747fb834466f4e9f0e92ebd3dff94181d2b917f030ebd0b6c28f29c46\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "model-transparency-cli-stack-v1-4@arm64_darwin",
"product": {
"name": "model-transparency-cli-stack-v1-4@arm64_darwin",
"product_id": "model-transparency-cli-stack-v1-4@arm64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/model-transparency-cli-stack-v1-4@1.4.3?filename=model_transparency_cli_darwin_arm64.tar.gz\u0026checksum=sha256%3A2f2a611fcdb377b951461c5d9bdd588cba5d2b276f7f0def5ff10c51ff7c6211\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "rekor-cli-stack-v1-4@arm64_darwin",
"product": {
"name": "rekor-cli-stack-v1-4@arm64_darwin",
"product_id": "rekor-cli-stack-v1-4@arm64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/rekor-cli-stack-v1-4@1.4.3?filename=rekor_cli_darwin_arm64.tar.gz\u0026checksum=sha256%3A96e5b122199bfc8972d090d3b62b6a1d3b739b3b2e7cb5afb00ffaff07484bbd\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "trillian-cli-stack-v1-4@arm64_darwin",
"product": {
"name": "trillian-cli-stack-v1-4@arm64_darwin",
"product_id": "trillian-cli-stack-v1-4@arm64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/trillian-cli-stack-v1-4@1.4.3?filename=createtree_darwin_arm64.tar.gz\u0026checksum=sha256%3A51c236fb7321309645f0363e712a7e208746167b52634d4591ca7afc3ebe35f4\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
}
],
"category": "architecture",
"name": "arm64_darwin"
},
{
"branches": [
{
"category": "product_version",
"name": "conforma-cli-stack-v1-4@amd64",
"product": {
"name": "conforma-cli-stack-v1-4@amd64",
"product_id": "conforma-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/conforma-cli-stack-v1-4@1.4.3?filename=ec_linux_amd64.tar.gz\u0026checksum=sha256%3A849c17c815b098e234b5d2e7de8a594d74aeceef9b275b7290a6c39cc87606da\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "cosign-cli-stack-v1-4@amd64",
"product": {
"name": "cosign-cli-stack-v1-4@amd64",
"product_id": "cosign-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/cosign-cli-stack-v1-4@1.4.3?filename=cosign_linux_amd64.tar.gz\u0026checksum=sha256%3A40448bcf19dd95ac19281503edad38837ee754210b0910ffa33ce01616bc483d\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64",
"product": {
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64",
"product_id": "fetch-tsa-certs-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/fetch-tsa-certs-cli-stack-v1-4@1.4.3?filename=fetch_tsa_certs_linux_amd64.tar.gz\u0026checksum=sha256%3Afdec9fafb327bd19e37a327ff8afdf81113839105a891ae43a4115387f448d80\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "gitsign-cli-stack-v1-4@amd64",
"product": {
"name": "gitsign-cli-stack-v1-4@amd64",
"product_id": "gitsign-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/gitsign-cli-stack-v1-4@1.4.3?filename=gitsign_cli_linux_amd64.tar.gz\u0026checksum=sha256%3Ab41a91d8aaafd27f321e5c6afaa2f80a1a192b65490ed83d06fd9d1a13cd2259\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "model-transparency-cli-stack-v1-4@amd64",
"product": {
"name": "model-transparency-cli-stack-v1-4@amd64",
"product_id": "model-transparency-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/model-transparency-cli-stack-v1-4@1.4.3?filename=model_transparency_cli_linux_amd64.tar.gz\u0026checksum=sha256%3Ad11f6fdf2936505d92011565b3191fede6e0c42361f3374f407104b0183d9650\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "rekor-cli-stack-v1-4@amd64",
"product": {
"name": "rekor-cli-stack-v1-4@amd64",
"product_id": "rekor-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/rekor-cli-stack-v1-4@1.4.3?filename=rekor_cli_linux_amd64.tar.gz\u0026checksum=sha256%3Ae8f93b6f40448046ea096ccbe68d3770108ee5ee35fbec23bb9f6aa00bf961f0\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "trillian-cli-stack-v1-4@amd64",
"product": {
"name": "trillian-cli-stack-v1-4@amd64",
"product_id": "trillian-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/trillian-cli-stack-v1-4@1.4.3?filename=createtree_linux_amd64.tar.gz\u0026checksum=sha256%3A4a1f79d40b04cb87ba8278793ab6cadf8139d4f013911501ac2b61c1342f8bf4\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "tuftool-cli-stack-v1-4@amd64",
"product": {
"name": "tuftool-cli-stack-v1-4@amd64",
"product_id": "tuftool-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/tuftool-cli-stack-v1-4@1.4.3?filename=tuftool_linux_amd64.tar.gz\u0026checksum=sha256%3Af0274ee12240fd7d6eddda2b85edfe71debf640f881f8f87864e07607226b281\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "conforma-cli-stack-v1-4@arm64",
"product": {
"name": "conforma-cli-stack-v1-4@arm64",
"product_id": "conforma-cli-stack-v1-4@arm64",
"product_identification_helper": {
"purl": "pkg:generic/conforma-cli-stack-v1-4@1.4.3?filename=ec_linux_arm64.tar.gz\u0026checksum=sha256%3Ad84c73bc689218700d9134a408e24dc01a28b1366920ebbd7b74837729c4be49\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "cosign-cli-stack-v1-4@arm64",
"product": {
"name": "cosign-cli-stack-v1-4@arm64",
"product_id": "cosign-cli-stack-v1-4@arm64",
"product_identification_helper": {
"purl": "pkg:generic/cosign-cli-stack-v1-4@1.4.3?filename=cosign_linux_arm64.tar.gz\u0026checksum=sha256%3A9ec55cf4fdae8edd492ca4eb70540edf6cff7a9d66abd537e4b16e197d35c2c4\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "fetch-tsa-certs-cli-stack-v1-4@arm64",
"product": {
"name": "fetch-tsa-certs-cli-stack-v1-4@arm64",
"product_id": "fetch-tsa-certs-cli-stack-v1-4@arm64",
"product_identification_helper": {
"purl": "pkg:generic/fetch-tsa-certs-cli-stack-v1-4@1.4.3?filename=fetch_tsa_certs_linux_arm64.tar.gz\u0026checksum=sha256%3A4e8e133040df495b1dfb5c777c7e00e839829594c4e3b5238103d6cede6732bf\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "gitsign-cli-stack-v1-4@arm64",
"product": {
"name": "gitsign-cli-stack-v1-4@arm64",
"product_id": "gitsign-cli-stack-v1-4@arm64",
"product_identification_helper": {
"purl": "pkg:generic/gitsign-cli-stack-v1-4@1.4.3?filename=gitsign_cli_linux_arm64.tar.gz\u0026checksum=sha256%3Aad344e63797afc8efb929973badbdd975c84bacb07043882e87966fafc5dde31\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "model-transparency-cli-stack-v1-4@arm64",
"product": {
"name": "model-transparency-cli-stack-v1-4@arm64",
"product_id": "model-transparency-cli-stack-v1-4@arm64",
"product_identification_helper": {
"purl": "pkg:generic/model-transparency-cli-stack-v1-4@1.4.3?filename=model_transparency_cli_linux_arm64.tar.gz\u0026checksum=sha256%3Af41c6465b0729d50b466881c215e7c033ca8d325001b1a572c8259542e21a751\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "rekor-cli-stack-v1-4@arm64",
"product": {
"name": "rekor-cli-stack-v1-4@arm64",
"product_id": "rekor-cli-stack-v1-4@arm64",
"product_identification_helper": {
"purl": "pkg:generic/rekor-cli-stack-v1-4@1.4.3?filename=rekor_cli_linux_arm64.tar.gz\u0026checksum=sha256%3A3a0f8b948f7307efd546408f0b2ca5de177d53ddbe124edc78ffd3f8d81571ed\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "trillian-cli-stack-v1-4@arm64",
"product": {
"name": "trillian-cli-stack-v1-4@arm64",
"product_id": "trillian-cli-stack-v1-4@arm64",
"product_identification_helper": {
"purl": "pkg:generic/trillian-cli-stack-v1-4@1.4.3?filename=createtree_linux_arm64.tar.gz\u0026checksum=sha256%3Ad0ef9416f3dab3fc977311aa9ee56c6eda926b09a5e26310dc0fd633c0fbcc62\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "conforma-cli-stack-v1-4@ppc64le",
"product": {
"name": "conforma-cli-stack-v1-4@ppc64le",
"product_id": "conforma-cli-stack-v1-4@ppc64le",
"product_identification_helper": {
"purl": "pkg:generic/conforma-cli-stack-v1-4@1.4.3?filename=ec_linux_ppc64le.tar.gz\u0026checksum=sha256%3A1a38cf42d9815165e7ba168a2ccd08d4183f30690d60779ff0365d348c9b6c73\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "cosign-cli-stack-v1-4@ppc64le",
"product": {
"name": "cosign-cli-stack-v1-4@ppc64le",
"product_id": "cosign-cli-stack-v1-4@ppc64le",
"product_identification_helper": {
"purl": "pkg:generic/cosign-cli-stack-v1-4@1.4.3?filename=cosign_linux_ppc64le.tar.gz\u0026checksum=sha256%3Aeb9a30596e16a751e664789d3cf9cec89bbbaade890df56c46e6f18562cece21\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"product": {
"name": "fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"product_id": "fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"product_identification_helper": {
"purl": "pkg:generic/fetch-tsa-certs-cli-stack-v1-4@1.4.3?filename=fetch_tsa_certs_linux_ppc64le.tar.gz\u0026checksum=sha256%3A130934550be2ea638bcf42f0f7b987b373b31b6a1a43a73b506c7a13a76d2d48\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "gitsign-cli-stack-v1-4@ppc64le",
"product": {
"name": "gitsign-cli-stack-v1-4@ppc64le",
"product_id": "gitsign-cli-stack-v1-4@ppc64le",
"product_identification_helper": {
"purl": "pkg:generic/gitsign-cli-stack-v1-4@1.4.3?filename=gitsign_cli_linux_ppc64le.tar.gz\u0026checksum=sha256%3A98f8bcf03a7241fb6e97fc71c10d36600066791a07423876ede59c950eb61f1b\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "model-transparency-cli-stack-v1-4@ppc64le",
"product": {
"name": "model-transparency-cli-stack-v1-4@ppc64le",
"product_id": "model-transparency-cli-stack-v1-4@ppc64le",
"product_identification_helper": {
"purl": "pkg:generic/model-transparency-cli-stack-v1-4@1.4.3?filename=model_transparency_cli_linux_ppc64le.tar.gz\u0026checksum=sha256%3A41c21c8e9f7bb881853fb9ce09136526010d0d4abf2f76549c76ca6f40740fba\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "rekor-cli-stack-v1-4@ppc64le",
"product": {
"name": "rekor-cli-stack-v1-4@ppc64le",
"product_id": "rekor-cli-stack-v1-4@ppc64le",
"product_identification_helper": {
"purl": "pkg:generic/rekor-cli-stack-v1-4@1.4.3?filename=rekor_cli_linux_ppc64le.tar.gz\u0026checksum=sha256%3Aad7261c944910196f7aab08e1a24dc77996d107a339d74da1d4196fd96a421e6\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "trillian-cli-stack-v1-4@ppc64le",
"product": {
"name": "trillian-cli-stack-v1-4@ppc64le",
"product_id": "trillian-cli-stack-v1-4@ppc64le",
"product_identification_helper": {
"purl": "pkg:generic/trillian-cli-stack-v1-4@1.4.3?filename=createtree_linux_ppc64le.tar.gz\u0026checksum=sha256%3A96991d095eb2dd8472471d377522f9e6ef36153292bd381b022b554de4539b19\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "conforma-cli-stack-v1-4@s390x",
"product": {
"name": "conforma-cli-stack-v1-4@s390x",
"product_id": "conforma-cli-stack-v1-4@s390x",
"product_identification_helper": {
"purl": "pkg:generic/conforma-cli-stack-v1-4@1.4.3?filename=ec_linux_s390x.tar.gz\u0026checksum=sha256%3Aaea309944ca64070e736e4695e9624ee4405cd5dd6c5b5c3dd85e15ff8c03554\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "cosign-cli-stack-v1-4@s390x",
"product": {
"name": "cosign-cli-stack-v1-4@s390x",
"product_id": "cosign-cli-stack-v1-4@s390x",
"product_identification_helper": {
"purl": "pkg:generic/cosign-cli-stack-v1-4@1.4.3?filename=cosign_linux_s390x.tar.gz\u0026checksum=sha256%3Ace65e11339269a1e1749aadef3add5b9d3b7487f3db8f358b4c0d2aba98e2d7a\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "fetch-tsa-certs-cli-stack-v1-4@s390x",
"product": {
"name": "fetch-tsa-certs-cli-stack-v1-4@s390x",
"product_id": "fetch-tsa-certs-cli-stack-v1-4@s390x",
"product_identification_helper": {
"purl": "pkg:generic/fetch-tsa-certs-cli-stack-v1-4@1.4.3?filename=fetch_tsa_certs_linux_s390x.tar.gz\u0026checksum=sha256%3A9fe9680fe67969fedfceb3993930056de422ff1836886145db8512ea18110368\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "gitsign-cli-stack-v1-4@s390x",
"product": {
"name": "gitsign-cli-stack-v1-4@s390x",
"product_id": "gitsign-cli-stack-v1-4@s390x",
"product_identification_helper": {
"purl": "pkg:generic/gitsign-cli-stack-v1-4@1.4.3?filename=gitsign_cli_linux_s390x.tar.gz\u0026checksum=sha256%3Aec9f094da7b0307fdc2d8440ca421caaaff22ab337c796fadeb7009313b6c564\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "model-transparency-cli-stack-v1-4@s390x",
"product": {
"name": "model-transparency-cli-stack-v1-4@s390x",
"product_id": "model-transparency-cli-stack-v1-4@s390x",
"product_identification_helper": {
"purl": "pkg:generic/model-transparency-cli-stack-v1-4@1.4.3?filename=model_transparency_cli_linux_s390x.tar.gz\u0026checksum=sha256%3A2655b8c2c57d107325710857fb7ca22c439b5466abd8adf60792b9821da9efc4\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "rekor-cli-stack-v1-4@s390x",
"product": {
"name": "rekor-cli-stack-v1-4@s390x",
"product_id": "rekor-cli-stack-v1-4@s390x",
"product_identification_helper": {
"purl": "pkg:generic/rekor-cli-stack-v1-4@1.4.3?filename=rekor_cli_linux_s390x.tar.gz\u0026checksum=sha256%3A0d8eadf8b8aee4e8e4eee350ef54c21ca921f9d3678157c8710d3ea3fb5d2215\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "trillian-cli-stack-v1-4@s390x",
"product": {
"name": "trillian-cli-stack-v1-4@s390x",
"product_id": "trillian-cli-stack-v1-4@s390x",
"product_identification_helper": {
"purl": "pkg:generic/trillian-cli-stack-v1-4@1.4.3?filename=createtree_linux_s390x.tar.gz\u0026checksum=sha256%3A029eadc83ace4ec12004539731d3b11817a0939c929bfa1895dad45bf4233899\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "conforma-cli-stack-v1-4@amd64_windows",
"product": {
"name": "conforma-cli-stack-v1-4@amd64_windows",
"product_id": "conforma-cli-stack-v1-4@amd64_windows",
"product_identification_helper": {
"purl": "pkg:generic/conforma-cli-stack-v1-4@1.4.3?filename=ec_windows_amd64.zip\u0026checksum=sha256%3Ab1e762e1277bf10d0ea1cd06268d521f827b41adff7898d3f2e90ef1f92b9459\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "cosign-cli-stack-v1-4@amd64_windows",
"product": {
"name": "cosign-cli-stack-v1-4@amd64_windows",
"product_id": "cosign-cli-stack-v1-4@amd64_windows",
"product_identification_helper": {
"purl": "pkg:generic/cosign-cli-stack-v1-4@1.4.3?filename=cosign_windows_amd64.zip\u0026checksum=sha256%3A38f4682466f7f1f9b6f0d0fa8b3faa635c94a604a0cb503280a139ee472fe0e6\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"product": {
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"product_id": "fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"product_identification_helper": {
"purl": "pkg:generic/fetch-tsa-certs-cli-stack-v1-4@1.4.3?filename=fetch_tsa_certs_windows_amd64.zip\u0026checksum=sha256%3A71479daf6769fff4772c5e17684f7f86b91b7eeaffba0144df6f8fe78b4d0306\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "gitsign-cli-stack-v1-4@amd64_windows",
"product": {
"name": "gitsign-cli-stack-v1-4@amd64_windows",
"product_id": "gitsign-cli-stack-v1-4@amd64_windows",
"product_identification_helper": {
"purl": "pkg:generic/gitsign-cli-stack-v1-4@1.4.3?filename=gitsign_cli_windows_amd64.zip\u0026checksum=sha256%3A6fef4f4b207582acdc89736dba2155dabed565b8946be14211a4b64e744cb72b\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "model-transparency-cli-stack-v1-4@amd64_windows",
"product": {
"name": "model-transparency-cli-stack-v1-4@amd64_windows",
"product_id": "model-transparency-cli-stack-v1-4@amd64_windows",
"product_identification_helper": {
"purl": "pkg:generic/model-transparency-cli-stack-v1-4@1.4.3?filename=model_transparency_cli_windows_amd64.exe.gz\u0026checksum=sha256%3A54414f4e41a7b7324464df9ba51a5c5c7a36bdf2a10243e18a18c0a07a4c7250\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "rekor-cli-stack-v1-4@amd64_windows",
"product": {
"name": "rekor-cli-stack-v1-4@amd64_windows",
"product_id": "rekor-cli-stack-v1-4@amd64_windows",
"product_identification_helper": {
"purl": "pkg:generic/rekor-cli-stack-v1-4@1.4.3?filename=rekor_cli_windows_amd64.zip\u0026checksum=sha256%3A99b32d68816507be2304422886bd7991c0f0796ff5e80f3cb2e5df573dfd3fdd\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "trillian-cli-stack-v1-4@amd64_windows",
"product": {
"name": "trillian-cli-stack-v1-4@amd64_windows",
"product_id": "trillian-cli-stack-v1-4@amd64_windows",
"product_identification_helper": {
"purl": "pkg:generic/trillian-cli-stack-v1-4@1.4.3?filename=createtree_windows_amd64.zip\u0026checksum=sha256%3A1426e9dba9f83dc9f9e7e74a8930d223cbc9179860aeb5dcc988f5f1b06eec70\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
}
],
"category": "architecture",
"name": "amd64_windows"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "conforma-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64"
},
"product_reference": "conforma-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conforma-cli-stack-v1-4@amd64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin"
},
"product_reference": "conforma-cli-stack-v1-4@amd64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conforma-cli-stack-v1-4@amd64_windows as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows"
},
"product_reference": "conforma-cli-stack-v1-4@amd64_windows",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conforma-cli-stack-v1-4@arm64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64"
},
"product_reference": "conforma-cli-stack-v1-4@arm64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conforma-cli-stack-v1-4@arm64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin"
},
"product_reference": "conforma-cli-stack-v1-4@arm64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conforma-cli-stack-v1-4@ppc64le as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le"
},
"product_reference": "conforma-cli-stack-v1-4@ppc64le",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conforma-cli-stack-v1-4@s390x as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
},
"product_reference": "conforma-cli-stack-v1-4@s390x",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64"
},
"product_reference": "cosign-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-cli-stack-v1-4@amd64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin"
},
"product_reference": "cosign-cli-stack-v1-4@amd64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-cli-stack-v1-4@amd64_windows as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows"
},
"product_reference": "cosign-cli-stack-v1-4@amd64_windows",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-cli-stack-v1-4@arm64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64"
},
"product_reference": "cosign-cli-stack-v1-4@arm64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-cli-stack-v1-4@arm64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin"
},
"product_reference": "cosign-cli-stack-v1-4@arm64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-cli-stack-v1-4@ppc64le as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le"
},
"product_reference": "cosign-cli-stack-v1-4@ppc64le",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-cli-stack-v1-4@s390x as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x"
},
"product_reference": "cosign-cli-stack-v1-4@s390x",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64"
},
"product_reference": "fetch-tsa-certs-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin"
},
"product_reference": "fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64_windows as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows"
},
"product_reference": "fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fetch-tsa-certs-cli-stack-v1-4@arm64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64"
},
"product_reference": "fetch-tsa-certs-cli-stack-v1-4@arm64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fetch-tsa-certs-cli-stack-v1-4@arm64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin"
},
"product_reference": "fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fetch-tsa-certs-cli-stack-v1-4@ppc64le as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le"
},
"product_reference": "fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fetch-tsa-certs-cli-stack-v1-4@s390x as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x"
},
"product_reference": "fetch-tsa-certs-cli-stack-v1-4@s390x",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gitsign-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64"
},
"product_reference": "gitsign-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gitsign-cli-stack-v1-4@amd64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin"
},
"product_reference": "gitsign-cli-stack-v1-4@amd64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gitsign-cli-stack-v1-4@amd64_windows as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows"
},
"product_reference": "gitsign-cli-stack-v1-4@amd64_windows",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gitsign-cli-stack-v1-4@arm64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64"
},
"product_reference": "gitsign-cli-stack-v1-4@arm64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gitsign-cli-stack-v1-4@arm64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin"
},
"product_reference": "gitsign-cli-stack-v1-4@arm64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gitsign-cli-stack-v1-4@ppc64le as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le"
},
"product_reference": "gitsign-cli-stack-v1-4@ppc64le",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gitsign-cli-stack-v1-4@s390x as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x"
},
"product_reference": "gitsign-cli-stack-v1-4@s390x",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "model-transparency-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64"
},
"product_reference": "model-transparency-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "model-transparency-cli-stack-v1-4@amd64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin"
},
"product_reference": "model-transparency-cli-stack-v1-4@amd64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "model-transparency-cli-stack-v1-4@amd64_windows as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows"
},
"product_reference": "model-transparency-cli-stack-v1-4@amd64_windows",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "model-transparency-cli-stack-v1-4@arm64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64"
},
"product_reference": "model-transparency-cli-stack-v1-4@arm64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "model-transparency-cli-stack-v1-4@arm64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin"
},
"product_reference": "model-transparency-cli-stack-v1-4@arm64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "model-transparency-cli-stack-v1-4@ppc64le as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le"
},
"product_reference": "model-transparency-cli-stack-v1-4@ppc64le",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "model-transparency-cli-stack-v1-4@s390x as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x"
},
"product_reference": "model-transparency-cli-stack-v1-4@s390x",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64"
},
"product_reference": "rekor-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-cli-stack-v1-4@amd64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin"
},
"product_reference": "rekor-cli-stack-v1-4@amd64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-cli-stack-v1-4@amd64_windows as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows"
},
"product_reference": "rekor-cli-stack-v1-4@amd64_windows",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-cli-stack-v1-4@arm64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64"
},
"product_reference": "rekor-cli-stack-v1-4@arm64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-cli-stack-v1-4@arm64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin"
},
"product_reference": "rekor-cli-stack-v1-4@arm64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-cli-stack-v1-4@ppc64le as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le"
},
"product_reference": "rekor-cli-stack-v1-4@ppc64le",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-cli-stack-v1-4@s390x as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x"
},
"product_reference": "rekor-cli-stack-v1-4@s390x",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "trillian-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64"
},
"product_reference": "trillian-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "trillian-cli-stack-v1-4@amd64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin"
},
"product_reference": "trillian-cli-stack-v1-4@amd64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "trillian-cli-stack-v1-4@amd64_windows as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows"
},
"product_reference": "trillian-cli-stack-v1-4@amd64_windows",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "trillian-cli-stack-v1-4@arm64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64"
},
"product_reference": "trillian-cli-stack-v1-4@arm64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "trillian-cli-stack-v1-4@arm64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin"
},
"product_reference": "trillian-cli-stack-v1-4@arm64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "trillian-cli-stack-v1-4@ppc64le as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le"
},
"product_reference": "trillian-cli-stack-v1-4@ppc64le",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "trillian-cli-stack-v1-4@s390x as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x"
},
"product_reference": "trillian-cli-stack-v1-4@s390x",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tuftool-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
},
"product_reference": "tuftool-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-27145",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-06-02T23:01:08.992540+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484207"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "RHBZ#2484207",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27145",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27145"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://go.dev/cl/783621",
"url": "https://go.dev/cl/783621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79694",
"url": "https://go.dev/issue/79694"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5037",
"url": "https://pkg.go.dev/vuln/GO-2026-5037"
}
],
"release_date": "2026-06-02T22:01:36.954000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T18:13:05+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49767"
},
{
"category": "workaround",
"details": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T18:13:05+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49767"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-39820",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-07T20:01:27.800929+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467820"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net/mail` package. Applications processing untrusted email inputs via `ParseAddress`, `ParseAddressList`, or `ParseDate` functions are susceptible to excessive resource consumption, which can lead to service unavailability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "RHBZ#2467820",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467820"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39820",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://go.dev/cl/759940",
"url": "https://go.dev/cl/759940"
},
{
"category": "external",
"summary": "https://go.dev/issue/78566",
"url": "https://go.dev/issue/78566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4986",
"url": "https://pkg.go.dev/vuln/GO-2026-4986"
}
],
"release_date": "2026-05-07T19:41:19.854000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T18:13:05+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49767"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T18:13:05+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49767"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-39828",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:46.775641+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480687"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important security flaw in the `golang.org/x/crypto/ssh` library. When an SSH server utilizing this library is configured with specific authentication callbacks that return a `PartialSuccessError` with non-nil permissions, an attacker could bypass intended certificate restrictions, such as `force-command`. This bypass could lead to unauthorized command execution or access on affected Red Hat systems configured with multi-factor authentication and certificate-based access controls.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "RHBZ#2480687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480687"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39828",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39828"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://go.dev/cl/781621",
"url": "https://go.dev/cl/781621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79562",
"url": "https://go.dev/issue/79562"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5014",
"url": "https://pkg.go.dev/vuln/GO-2026-5014"
}
],
"release_date": "2026-05-22T02:31:26.883000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T18:13:05+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49767"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions"
},
{
"cve": "CVE-2026-39829",
"cwe": {
"id": "CWE-1284",
"name": "Improper Validation of Specified Quantity in Input"
},
"discovery_date": "2026-05-22T04:01:30.092249+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480681"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in golang.org/x/crypto/ssh is rated as Important. An unauthenticated remote attacker could trigger a denial of service by providing a specially crafted public key with excessively large parameters during SSH public key authentication. This could lead to prolonged CPU consumption on the server, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "RHBZ#2480681",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480681"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39829",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39829"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://go.dev/cl/781641",
"url": "https://go.dev/cl/781641"
},
{
"category": "external",
"summary": "https://go.dev/cl/781661",
"url": "https://go.dev/cl/781661"
},
{
"category": "external",
"summary": "https://go.dev/issue/79565",
"url": "https://go.dev/issue/79565"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5018",
"url": "https://pkg.go.dev/vuln/GO-2026-5018"
}
],
"release_date": "2026-05-22T02:31:27.324000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T18:13:05+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49767"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters"
},
{
"cve": "CVE-2026-39830",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2026-05-22T04:01:38.517202+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection\u0027s read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh`. A remote, unauthenticated attacker can exploit this vulnerability by sending unsolicited global request responses to an affected SSH server, leading to resource exhaustion and a denial of service. The impact is considered Important due to the potential for unauthenticated remote disruption of services utilizing the vulnerable SSH library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "RHBZ#2480684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39830",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39830"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://go.dev/cl/781640",
"url": "https://go.dev/cl/781640"
},
{
"category": "external",
"summary": "https://go.dev/cl/781664",
"url": "https://go.dev/cl/781664"
},
{
"category": "external",
"summary": "https://go.dev/issue/79564",
"url": "https://go.dev/issue/79564"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5017",
"url": "https://pkg.go.dev/vuln/GO-2026-5017"
}
],
"release_date": "2026-05-22T02:31:27.208000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T18:13:05+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49767"
},
{
"category": "workaround",
"details": "To mitigate this denial of service vulnerability, restrict network access to any service that utilizes the `golang.org/x/crypto/ssh` library and is exposed to untrusted networks. Implement firewall rules to allow connections only from trusted hosts or networks. This action limits the ability of malicious peers to send unsolicited global request responses. A restart of the affected service may be necessary for the new network rules to be applied effectively.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses"
},
{
"cve": "CVE-2026-39832",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:41.402561+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480685"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/crypto/ssh/agent` allows for a security bypass when SSH keys with destination restrictions are forwarded via an SSH agent. This flaw could lead to unintended exposure of SSH keys, enabling an attacker to use the forwarded key without the specified restrictions on remote hosts. Red Hat products utilizing `golang.org/x/crypto/ssh/agent` for key forwarding may be affected if users rely on constraint extensions for limiting key usage.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "RHBZ#2480685",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480685"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39832",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39832"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://go.dev/cl/778642",
"url": "https://go.dev/cl/778642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79435",
"url": "https://go.dev/issue/79435"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5006",
"url": "https://pkg.go.dev/vuln/GO-2026-5006"
}
],
"release_date": "2026-05-22T02:31:26.660000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T18:13:05+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49767"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions"
},
{
"cve": "CVE-2026-39833",
"cwe": {
"id": "CWE-358",
"name": "Improperly Implemented Security Check for Standard"
},
"discovery_date": "2026-05-22T04:01:35.714593+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480683"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/agent. The NewKeyring() function, which creates an in-memory keyring, failed to enforce the ConfirmBeforeUse constraint on keys. This allowed keys configured to require user confirmation before use to perform signing operations without any prompt or indication to the user. Consequently, an attacker could potentially bypass intended security controls, leading to unauthorized cryptographic signing actions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to unenforced key confirmation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat rates this issue as Moderate with RH CVSS 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N). A flaw was found in golang.org/x/crypto/ssh/agent where the in-memory keyring returned by NewKeyring() silently accepted SSH agent keys with the ConfirmBeforeUse constraint but did not enforce interactive confirmation before signing. Exploitation requires local access and low privileges on a system where an affected application uses NewKeyring() with ConfirmBeforeUse. Most Red Hat products that bundle golang.org/x/crypto do not use the ssh/agent ConfirmBeforeUse feature in their supported execution paths. The upstream CISA CVSS 9.1 assumes a broader network attack context that does not reflect Red Hat product deployment.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39833"
},
{
"category": "external",
"summary": "RHBZ#2480683",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480683"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39833",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39833"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39833",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39833"
},
{
"category": "external",
"summary": "https://go.dev/cl/778640",
"url": "https://go.dev/cl/778640"
},
{
"category": "external",
"summary": "https://go.dev/cl/778641",
"url": "https://go.dev/cl/778641"
},
{
"category": "external",
"summary": "https://go.dev/issue/79436",
"url": "https://go.dev/issue/79436"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5005",
"url": "https://pkg.go.dev/vuln/GO-2026-5005"
}
],
"release_date": "2026-05-22T02:31:26.294000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T18:13:05+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49767"
},
{
"category": "workaround",
"details": "Update affected Go applications to use golang.org/x/crypto version 0.52.0 or later, which rejects unsupported ConfirmBeforeUse keys instead of silently ignoring the constraint. As a workaround, do not add keys with ConfirmBeforeUse to the in-memory keyring from golang.org/x/crypto/ssh/agent, or use an SSH agent implementation that correctly enforces confirm-before-use.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to unenforced key confirmation"
},
{
"cve": "CVE-2026-39835",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-05-22T04:01:27.279943+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480680"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh` affecting SSH servers that utilize `CertChecker` as a public key callback without explicitly configuring `IsUserAuthority` or `IsHostAuthority`. A remote, unauthenticated attacker can trigger a server panic by presenting a specially crafted certificate, leading to service disruption. Exploitation requires a specific, non-default configuration of the `CertChecker`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "RHBZ#2480680",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480680"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39835",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39835"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://go.dev/cl/781660",
"url": "https://go.dev/cl/781660"
},
{
"category": "external",
"summary": "https://go.dev/issue/79563",
"url": "https://go.dev/issue/79563"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5015",
"url": "https://pkg.go.dev/vuln/GO-2026-5015"
}
],
"release_date": "2026-05-22T02:31:26.982000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T18:13:05+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49767"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate"
},
{
"cve": "CVE-2026-42151",
"cwe": {
"id": "CWE-256",
"name": "Plaintext Storage of a Password"
},
"discovery_date": "2026-05-04T19:02:26.983660+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466507"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important information disclosure flaw in Prometheus affects instances configured to use Azure AD remote write with OAuth authentication. The client secret, intended to be a secure credential, is exposed in plaintext through the `/-/config` HTTP API endpoint. This could allow an attacker with access to this endpoint to retrieve the secret, potentially compromising integrated Azure AD services.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "RHBZ#2466507",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466507"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42151",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42151"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18587",
"url": "https://github.com/prometheus/prometheus/pull/18587"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18590",
"url": "https://github.com/prometheus/prometheus/pull/18590"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj"
}
],
"release_date": "2026-05-04T18:12:16.917000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T18:13:05+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49767"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API"
},
{
"cve": "CVE-2026-42499",
"cwe": {
"id": "CWE-1046",
"name": "Creation of Immutable Text Using String Concatenation"
},
"discovery_date": "2026-05-07T20:00:51.685602+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467809"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `net/mail` package of the Go standard library. A remote attacker can exploit this flaw by sending specially crafted email addresses, leading to excessive resource consumption and a denial of service in Go applications that parse email addresses using the affected library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "RHBZ#2467809",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467809"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42499",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42499"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://go.dev/cl/771520",
"url": "https://go.dev/cl/771520"
},
{
"category": "external",
"summary": "https://go.dev/issue/78987",
"url": "https://go.dev/issue/78987"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4977",
"url": "https://pkg.go.dev/vuln/GO-2026-4977"
}
],
"release_date": "2026-05-07T19:41:18.615000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T18:13:05+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49767"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing"
},
{
"cve": "CVE-2026-42508",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-05-22T04:01:49.515058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480688"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in `golang.org/x/crypto/ssh/knownhosts` allows a remote attacker to bypass security checks. This vulnerability arises because the system fails to properly verify the revocation status of a Certificate Authority (CA) `SignatureKey`. In Red Hat environments, this could enable an attacker to present a revoked key, leading to its acceptance as valid and potentially granting unauthorized access or facilitating the spoofing of legitimate entities.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "RHBZ#2480688",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480688"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42508",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42508"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://go.dev/cl/781220",
"url": "https://go.dev/cl/781220"
},
{
"category": "external",
"summary": "https://go.dev/issue/79568",
"url": "https://go.dev/issue/79568"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5021",
"url": "https://pkg.go.dev/vuln/GO-2026-5021"
}
],
"release_date": "2026-05-22T02:31:27.644000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T18:13:05+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49767"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey"
},
{
"cve": "CVE-2026-46595",
"cwe": {
"id": "CWE-303",
"name": "Incorrect Implementation of Authentication Algorithm"
},
"discovery_date": "2026-05-22T04:01:52.215134+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480689"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/crypto/ssh is vulnerable to authorization bypass when SSH server configurations rely on source-address validation alongside non-public-key authentication callbacks. An attacker with low privileges who can authenticate through such a callback path may bypass intended source-address restrictions and gain unauthorized SSH access. Red Hat impact sits in services built with affected x/crypto/ssh, including RHEL golang streams, hummingbird Go toolchains, RHACM/MCE agents, and OpenShift or Ceph components that embed Go SSH servers with mixed callback types.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46595"
},
{
"category": "external",
"summary": "RHBZ#2480689",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480689"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46595",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46595"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595"
},
{
"category": "external",
"summary": "https://go.dev/cl/781642",
"url": "https://go.dev/cl/781642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79570",
"url": "https://go.dev/issue/79570"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5023",
"url": "https://pkg.go.dev/vuln/GO-2026-5023"
}
],
"release_date": "2026-05-22T02:31:27.894000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T18:13:05+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49767"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation"
}
]
}
RHSA-2026:50205
Vulnerability from csaf_redhat - Published: 2026-08-04 15:29 - Updated: 2026-08-26 04:26Summary
Red Hat Security Advisory: Red Hat build of OpenTelemetry 3.10.1 release
Severity
Important
Notes
Topic: Red Hat build of OpenTelemetry 3.10.1 has been released
Details: This release of the Red Hat build of OpenTelemetry provides new features, security improvements, and bug fixes.
Breaking changes:
* None
Deprecations:
* None
Technology Preview features:
* None
Enhancements:
* None
Bug fixes:
* None
Known issues:
* None
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in GNU Coreutils. The sort utility's begfield() function is vulnerable to a heap buffer under-read. The program may access memory outside the allocated buffer if a user runs a crafted command using the traditional key format. A malicious input could lead to a crash or leak sensitive data.
4.4 (Medium)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in glibc, the GNU C Library. Specifically, deprecated functions responsible for printing TSIG (Transaction Signature) records fail to properly manage memory buffers. This oversight can lead to an out-of-bounds write when processing specially crafted TSIG records. An attacker could exploit this to cause a denial of service or potentially execute arbitrary code.
5.9 (Medium)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le | — |
Vendor Fix
fix
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x | — |
Threats
Impact
Moderate
A flaw was found in glibc (GNU C Library). This vulnerability occurs when an application uses the `scanf` family of functions with a `%mc` format specifier, which is used for dynamically allocating memory for character input, and provides an explicit width greater than 1024. This specific combination can lead to a one-byte heap buffer overflow, potentially allowing an attacker to corrupt memory.
5.0 (Medium)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in glibc (GNU C Library). When the `ungetwc` function is called on a file stream using wide characters with specific overlapping single-byte and multi-byte encodings, it may attempt to read data outside of its allocated buffer. This can lead to the unintentional disclosure of sensitive information from memory or cause the program to crash, resulting in a denial of service.
5.0 (Medium)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the HTTP/2 protocol implementation within the Go standard library (golang.org/x/net and net/http/internal/http2). A remote attacker can exploit this vulnerability by sending a specially crafted HTTP/2 SETTINGS frame with the SETTINGS_MAX_FRAME_SIZE parameter set to zero. This malicious frame causes the transport layer to enter an infinite loop of writing CONTINUATION frames, leading to resource exhaustion and a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `html/template` package of Go. A remote attacker could exploit this vulnerability by inserting ASCII whitespaces around the equals sign (`=`) within a URL's content attribute inside a `<meta>` tag. This improper escaping could lead to Cross-Site Scripting (XSS), allowing the attacker to execute malicious scripts in the user's browser.
5.4 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the Golang MIME (Multipurpose Internet Mail Extensions) package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the net/textproto package in Golang. When functions in this package return errors, they include their input as part of the error message. An attacker could exploit this by injecting misleading content into these error messages, which are then printed or logged. This could lead to confusion or misinterpretation of critical system information.
5.3 (Medium)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the `acl` package, specifically within its `libacl` pathname-based functions. A local attacker could exploit this vulnerability by using a symbolic link to replace a pathname component. This could allow the attacker to redirect access control list (ACL) read or write operations to arbitrary files or directories, leading to unauthorized manipulation of ACLs and ultimately local privilege escalation.
7.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x | — |
Workaround
|
Threats
Impact
Important
A time-of-check to time-of-use (TOCTOU) race condition vulnerability was found in `acl`. By replacing a pathname component with a symbolic link between a security check and subsequent file operations, an attacker can redirect file access control list operations. This occurs when privileged processes invoke `getfacl` or `setfacl` over an attacker-controlled path, potentially leading to local privilege escalation.
6.3 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le | — |
Vendor Fix
fix
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x | — |
Threats
Impact
Moderate
References
101 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat build of OpenTelemetry 3.10.1 has been released",
"title": "Topic"
},
{
"category": "general",
"text": "This release of the Red Hat build of OpenTelemetry provides new features, security improvements, and bug fixes.\n\n\nBreaking changes:\n\n* None\n\n\nDeprecations:\n\n* None\n\n\nTechnology Preview features:\n\n* None\n\n\nEnhancements:\n\n* None\n\n\nBug fixes:\n\n* None\n\n\nKnown issues:\n\n* None",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:50205",
"url": "https://access.redhat.com/errata/RHSA-2026:50205"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-5278",
"url": "https://access.redhat.com/security/cve/CVE-2025-5278"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27145",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33811",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33814",
"url": "https://access.redhat.com/security/cve/CVE-2026-33814"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39820",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39823",
"url": "https://access.redhat.com/security/cve/CVE-2026-39823"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42504",
"url": "https://access.redhat.com/security/cve/CVE-2026-42504"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42507",
"url": "https://access.redhat.com/security/cve/CVE-2026-42507"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-5435",
"url": "https://access.redhat.com/security/cve/CVE-2026-5435"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-54369",
"url": "https://access.redhat.com/security/cve/CVE-2026-54369"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-54370",
"url": "https://access.redhat.com/security/cve/CVE-2026-54370"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-5450",
"url": "https://access.redhat.com/security/cve/CVE-2026-5450"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-5928",
"url": "https://access.redhat.com/security/cve/CVE-2026-5928"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/red_hat_build_of_opentelemetry",
"url": "https://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/red_hat_build_of_opentelemetry"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_50205.json"
}
],
"title": "Red Hat Security Advisory: Red Hat build of OpenTelemetry 3.10.1 release",
"tracking": {
"current_release_date": "2026-08-26T04:26:34+00:00",
"generator": {
"date": "2026-08-26T04:26:34+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:50205",
"initial_release_date": "2026-08-04T15:29:30+00:00",
"revision_history": [
{
"date": "2026-08-04T15:29:30+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-22T06:15:42+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-26T04:26:34+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift distributed tracing 3.10.1",
"product": {
"name": "Red Hat OpenShift distributed tracing 3.10.1",
"product_id": "Red Hat OpenShift distributed tracing 3.10.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift distributed tracing"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"product": {
"name": "registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"product_id": "registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"product_identification_helper": {
"purl": "pkg:oci/opentelemetry-operator-bundle@sha256%3A356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03?arch=amd64\u0026repository_url=registry.redhat.io/rhosdt/opentelemetry-operator-bundle\u0026tag=1785744179"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"product": {
"name": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"product_id": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"product_identification_helper": {
"purl": "pkg:oci/opentelemetry-collector-rhel9@sha256%3A73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3?arch=amd64\u0026repository_url=registry.redhat.io/rhosdt/opentelemetry-collector-rhel9\u0026tag=1785704636"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"product": {
"name": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"product_id": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"product_identification_helper": {
"purl": "pkg:oci/opentelemetry-rhel9-operator@sha256%3A03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77?arch=amd64\u0026repository_url=registry.redhat.io/rhosdt/opentelemetry-rhel9-operator\u0026tag=1785704547"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"product": {
"name": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"product_id": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"product_identification_helper": {
"purl": "pkg:oci/opentelemetry-target-allocator-rhel9@sha256%3A31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09?arch=amd64\u0026repository_url=registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9\u0026tag=1785704551"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"product": {
"name": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"product_id": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"product_identification_helper": {
"purl": "pkg:oci/opentelemetry-collector-rhel9@sha256%3A4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595?arch=arm64\u0026repository_url=registry.redhat.io/rhosdt/opentelemetry-collector-rhel9\u0026tag=1785704636"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"product": {
"name": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"product_id": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"product_identification_helper": {
"purl": "pkg:oci/opentelemetry-rhel9-operator@sha256%3A589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f?arch=arm64\u0026repository_url=registry.redhat.io/rhosdt/opentelemetry-rhel9-operator\u0026tag=1785704547"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"product": {
"name": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"product_id": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"product_identification_helper": {
"purl": "pkg:oci/opentelemetry-target-allocator-rhel9@sha256%3A79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f?arch=arm64\u0026repository_url=registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9\u0026tag=1785704551"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"product": {
"name": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"product_id": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/opentelemetry-collector-rhel9@sha256%3Aa14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737?arch=ppc64le\u0026repository_url=registry.redhat.io/rhosdt/opentelemetry-collector-rhel9\u0026tag=1785704636"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le",
"product": {
"name": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le",
"product_id": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/opentelemetry-rhel9-operator@sha256%3A75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2?arch=ppc64le\u0026repository_url=registry.redhat.io/rhosdt/opentelemetry-rhel9-operator\u0026tag=1785704547"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"product": {
"name": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"product_id": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/opentelemetry-target-allocator-rhel9@sha256%3A2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11?arch=ppc64le\u0026repository_url=registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9\u0026tag=1785704551"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"product": {
"name": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"product_id": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"product_identification_helper": {
"purl": "pkg:oci/opentelemetry-collector-rhel9@sha256%3A03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39?arch=s390x\u0026repository_url=registry.redhat.io/rhosdt/opentelemetry-collector-rhel9\u0026tag=1785704636"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"product": {
"name": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"product_id": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"product_identification_helper": {
"purl": "pkg:oci/opentelemetry-rhel9-operator@sha256%3A12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9?arch=s390x\u0026repository_url=registry.redhat.io/rhosdt/opentelemetry-rhel9-operator\u0026tag=1785704547"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x",
"product": {
"name": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x",
"product_id": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x",
"product_identification_helper": {
"purl": "pkg:oci/opentelemetry-target-allocator-rhel9@sha256%3Aa67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f?arch=s390x\u0026repository_url=registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9\u0026tag=1785704551"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x as a component of Red Hat OpenShift distributed tracing 3.10.1",
"product_id": "Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x"
},
"product_reference": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.10.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64 as a component of Red Hat OpenShift distributed tracing 3.10.1",
"product_id": "Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64"
},
"product_reference": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.10.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64 as a component of Red Hat OpenShift distributed tracing 3.10.1",
"product_id": "Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64"
},
"product_reference": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.10.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le as a component of Red Hat OpenShift distributed tracing 3.10.1",
"product_id": "Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le"
},
"product_reference": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.10.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64 as a component of Red Hat OpenShift distributed tracing 3.10.1",
"product_id": "Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64"
},
"product_reference": "registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.10.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64 as a component of Red Hat OpenShift distributed tracing 3.10.1",
"product_id": "Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64"
},
"product_reference": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.10.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x as a component of Red Hat OpenShift distributed tracing 3.10.1",
"product_id": "Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x"
},
"product_reference": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.10.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64 as a component of Red Hat OpenShift distributed tracing 3.10.1",
"product_id": "Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64"
},
"product_reference": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.10.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le as a component of Red Hat OpenShift distributed tracing 3.10.1",
"product_id": "Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le"
},
"product_reference": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.10.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le as a component of Red Hat OpenShift distributed tracing 3.10.1",
"product_id": "Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le"
},
"product_reference": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.10.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64 as a component of Red Hat OpenShift distributed tracing 3.10.1",
"product_id": "Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64"
},
"product_reference": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.10.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64 as a component of Red Hat OpenShift distributed tracing 3.10.1",
"product_id": "Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64"
},
"product_reference": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.10.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x as a component of Red Hat OpenShift distributed tracing 3.10.1",
"product_id": "Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
},
"product_reference": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.10.1"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Mohamed Maatallah"
]
}
],
"cve": "CVE-2025-5278",
"cwe": {
"id": "CWE-121",
"name": "Stack-based Buffer Overflow"
},
"discovery_date": "2025-05-27T13:50:20.148000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2368764"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in GNU Coreutils. The sort utility\u0027s begfield() function is vulnerable to a heap buffer under-read. The program may access memory outside the allocated buffer if a user runs a crafted command using the traditional key format. A malicious input could lead to a crash or leak sensitive data.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "coreutils: Heap Buffer Under-Read in GNU Coreutils sort via Key Specification",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The severity of this issue is considered Moderate rather than Critical because successful exploitation requires the use of the traditional key specification syntax with an exceptionally large character position value, which is uncommon in typical usage. Although the vulnerability can lead to a heap buffer overflow resulting in a read one byte before the allocated buffer, it does not enable code execution, privilege escalation, or direct compromise of data confidentiality or integrity. The impact is therefore primarily limited to potential service disruption due to application crashes.\n\nFurthermore, default RHEL configurations such as SELinux enforcement, ASLR, and memory protections reduce the likelihood of exploitation and limit the scope of any resulting impact. These safeguards, along with typical system usage patterns that do not commonly invoke the vulnerable code path, restrict exploitability in default and hardened environments. Consequently, the vulnerability\u2019s overall security impact is mitigated compared to flaws that allow immediate code execution or broader compromise across system components.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-5278"
},
{
"category": "external",
"summary": "RHBZ#2368764",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2368764"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-5278",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5278"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-5278",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-5278"
},
{
"category": "external",
"summary": "https://cgit.git.savannah.gnu.org/cgit/coreutils.git/commit/?id=8c9602e3a145e9596dc1a63c6ed67865814b6633",
"url": "https://cgit.git.savannah.gnu.org/cgit/coreutils.git/commit/?id=8c9602e3a145e9596dc1a63c6ed67865814b6633"
},
{
"category": "external",
"summary": "https://debbugs.gnu.org/cgi/bugreport.cgi?bug=78507",
"url": "https://debbugs.gnu.org/cgi/bugreport.cgi?bug=78507"
}
],
"release_date": "2025-05-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-04T15:29:30+00:00",
"details": "For details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/operators/administrator-tasks#olm-upgrading-operators",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:50205"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "coreutils: Heap Buffer Under-Read in GNU Coreutils sort via Key Specification"
},
{
"cve": "CVE-2026-5435",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2026-04-28T14:01:44.684432+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2463465"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in glibc, the GNU C Library. Specifically, deprecated functions responsible for printing TSIG (Transaction Signature) records fail to properly manage memory buffers. This oversight can lead to an out-of-bounds write when processing specially crafted TSIG records. An attacker could exploit this to cause a denial of service or potentially execute arbitrary code.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "glibc: glibc: Out-of-bounds write via TSIG record processing",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-5435"
},
{
"category": "external",
"summary": "RHBZ#2463465",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2463465"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-5435",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-5435"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-5435",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-5435"
},
{
"category": "external",
"summary": "https://inbox.sourceware.org/libc-announce/7a655d55-276f-41fe-b550-feb3ebb2ce91@redhat.com/T/#u",
"url": "https://inbox.sourceware.org/libc-announce/7a655d55-276f-41fe-b550-feb3ebb2ce91@redhat.com/T/#u"
},
{
"category": "external",
"summary": "https://sourceware.org/bugzilla/show_bug.cgi?id=34033",
"url": "https://sourceware.org/bugzilla/show_bug.cgi?id=34033"
}
],
"release_date": "2026-04-28T11:58:54.962000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-04T15:29:30+00:00",
"details": "For details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/operators/administrator-tasks#olm-upgrading-operators",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:50205"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "glibc: glibc: Out-of-bounds write via TSIG record processing"
},
{
"cve": "CVE-2026-5450",
"cwe": {
"id": "CWE-131",
"name": "Incorrect Calculation of Buffer Size"
},
"discovery_date": "2026-04-20T21:01:35.403778+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2459853"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in glibc (GNU C Library). This vulnerability occurs when an application uses the `scanf` family of functions with a `%mc` format specifier, which is used for dynamically allocating memory for character input, and provides an explicit width greater than 1024. This specific combination can lead to a one-byte heap buffer overflow, potentially allowing an attacker to corrupt memory.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Because this flaw requires that an affected application call the affected functions with an attacker-supplied value, Red Hat assesses the Attack Complexity of this flaw as High. Additionally, the flaw overflows a single byte onto the heap, so meaningful exploitation requires that the heap is structured such that a single byte can lead to an attacker-controlled outcome, or that the affected functions can be invoked with an attacker-controlled buffer base address. Regarding Attack Vector and Privileges Required, Red Hat assesses these elements as Local and Low respectively, as remote unauthenticated exploitation would require all the conditions above in a library client that listened on a network port and processed attacker-controllable data with the affected library functions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-5450"
},
{
"category": "external",
"summary": "RHBZ#2459853",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2459853"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-5450",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-5450"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-5450",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-5450"
},
{
"category": "external",
"summary": "https://inbox.sourceware.org/libc-announce/b11f0003-6ec1-4bd6-b9de-9e38a4efeca3@redhat.com/T/#u",
"url": "https://inbox.sourceware.org/libc-announce/b11f0003-6ec1-4bd6-b9de-9e38a4efeca3@redhat.com/T/#u"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-5450#range-21286997",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-5450#range-21286997"
},
{
"category": "external",
"summary": "https://sourceware.org/bugzilla/show_bug.cgi?id=CVE-2026-5450",
"url": "https://sourceware.org/bugzilla/show_bug.cgi?id=CVE-2026-5450"
}
],
"release_date": "2026-04-20T20:55:41.170000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-04T15:29:30+00:00",
"details": "For details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/operators/administrator-tasks#olm-upgrading-operators",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:50205"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 5.0,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width"
},
{
"cve": "CVE-2026-5928",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2026-04-20T21:01:38.811304+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2459854"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in glibc (GNU C Library). When the `ungetwc` function is called on a file stream using wide characters with specific overlapping single-byte and multi-byte encodings, it may attempt to read data outside of its allocated buffer. This can lead to the unintentional disclosure of sensitive information from memory or cause the program to crash, resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-5928"
},
{
"category": "external",
"summary": "RHBZ#2459854",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2459854"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-5928",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-5928"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-5928",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-5928"
},
{
"category": "external",
"summary": "https://sourceware.org/bugzilla/show_bug.cgi?id=33998",
"url": "https://sourceware.org/bugzilla/show_bug.cgi?id=33998"
}
],
"release_date": "2026-04-20T20:37:31.743000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-04T15:29:30+00:00",
"details": "For details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/operators/administrator-tasks#olm-upgrading-operators",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:50205"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 5.0,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings"
},
{
"cve": "CVE-2026-27145",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-06-02T23:01:08.992540+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484207"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "RHBZ#2484207",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27145",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27145"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://go.dev/cl/783621",
"url": "https://go.dev/cl/783621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79694",
"url": "https://go.dev/issue/79694"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5037",
"url": "https://pkg.go.dev/vuln/GO-2026-5037"
}
],
"release_date": "2026-06-02T22:01:36.954000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-04T15:29:30+00:00",
"details": "For details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/operators/administrator-tasks#olm-upgrading-operators",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:50205"
},
{
"category": "workaround",
"details": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-04T15:29:30+00:00",
"details": "For details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/operators/administrator-tasks#olm-upgrading-operators",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:50205"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-33814",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-07T20:01:11.324941+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467815"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the HTTP/2 protocol implementation within the Go standard library (golang.org/x/net and net/http/internal/http2). A remote attacker can exploit this vulnerability by sending a specially crafted HTTP/2 SETTINGS frame with the SETTINGS_MAX_FRAME_SIZE parameter set to zero. This malicious frame causes the transport layer to enter an infinite loop of writing CONTINUATION frames, leading to resource exhaustion and a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important denial of service flaw in the Go HTTP/2 protocol implementation allows a remote, unauthenticated attacker to exhaust system resources. By sending a specially crafted HTTP/2 SETTINGS frame with a zero-value SETTINGS_MAX_FRAME_SIZE, the vulnerable Go library enters an infinite loop, impacting the availability of services utilizing HTTP/2.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33814"
},
{
"category": "external",
"summary": "RHBZ#2467815",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467815"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33814",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33814"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33814",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33814"
},
{
"category": "external",
"summary": "https://go.dev/cl/761581",
"url": "https://go.dev/cl/761581"
},
{
"category": "external",
"summary": "https://go.dev/cl/761640",
"url": "https://go.dev/cl/761640"
},
{
"category": "external",
"summary": "https://go.dev/issue/78476",
"url": "https://go.dev/issue/78476"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4918",
"url": "https://pkg.go.dev/vuln/GO-2026-4918"
}
],
"release_date": "2026-05-07T19:41:17.631000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-04T15:29:30+00:00",
"details": "For details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/operators/administrator-tasks#olm-upgrading-operators",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:50205"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame"
},
{
"cve": "CVE-2026-39820",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-07T20:01:27.800929+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467820"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net/mail` package. Applications processing untrusted email inputs via `ParseAddress`, `ParseAddressList`, or `ParseDate` functions are susceptible to excessive resource consumption, which can lead to service unavailability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "RHBZ#2467820",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467820"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39820",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://go.dev/cl/759940",
"url": "https://go.dev/cl/759940"
},
{
"category": "external",
"summary": "https://go.dev/issue/78566",
"url": "https://go.dev/issue/78566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4986",
"url": "https://pkg.go.dev/vuln/GO-2026-4986"
}
],
"release_date": "2026-05-07T19:41:19.854000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-04T15:29:30+00:00",
"details": "For details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/operators/administrator-tasks#olm-upgrading-operators",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:50205"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs"
},
{
"cve": "CVE-2026-39823",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-07T20:00:58.284024+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467811"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `html/template` package of Go. A remote attacker could exploit this vulnerability by inserting ASCII whitespaces around the equals sign (`=`) within a URL\u0027s content attribute inside a `\u003cmeta\u003e` tag. This improper escaping could lead to Cross-Site Scripting (XSS), allowing the attacker to execute malicious scripts in the user\u0027s browser.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat products ship the Go `html/template` package as a dependency of various Go-based components. The affected functionality involves URL escaping inside `\u003cmeta\u003e` tag content attributes, which requires an application to render user-controlled URLs in meta tags using `html/template`. While the vulnerable code is present, exploitation requires a specific usage pattern that is uncommon in Red Hat product code paths.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39823"
},
{
"category": "external",
"summary": "RHBZ#2467811",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467811"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39823",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39823"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39823",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39823"
},
{
"category": "external",
"summary": "https://go.dev/cl/769920",
"url": "https://go.dev/cl/769920"
},
{
"category": "external",
"summary": "https://go.dev/issue/78913",
"url": "https://go.dev/issue/78913"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4982",
"url": "https://pkg.go.dev/vuln/GO-2026-4982"
}
],
"release_date": "2026-05-07T19:41:19.524000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-04T15:29:30+00:00",
"details": "For details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/operators/administrator-tasks#olm-upgrading-operators",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:50205"
},
{
"category": "workaround",
"details": "Ensure that user-supplied URLs are validated and sanitized before being passed to Go\u0027s `html/template` package for rendering in HTML meta tag content attributes. Avoid rendering untrusted URL data directly in meta tag content attributes.",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content"
},
{
"cve": "CVE-2026-42504",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-06-02T23:01:00.320527+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484204"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Golang MIME (Multipurpose Internet Mail Extensions) package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is rated as an Important severity flaw. A remote attacker could trigger a Denial of Service by sending a crafted MIME header with numerous invalid encoded-words to an application utilizing the affected Golang MIME package. This could lead to excessive CPU consumption on the system processing the malformed header, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42504"
},
{
"category": "external",
"summary": "RHBZ#2484204",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484204"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42504",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42504"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42504",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42504"
},
{
"category": "external",
"summary": "https://go.dev/cl/774481",
"url": "https://go.dev/cl/774481"
},
{
"category": "external",
"summary": "https://go.dev/issue/79217",
"url": "https://go.dev/issue/79217"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5038",
"url": "https://pkg.go.dev/vuln/GO-2026-5038"
}
],
"release_date": "2026-06-02T22:01:37.219000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-04T15:29:30+00:00",
"details": "For details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/operators/administrator-tasks#olm-upgrading-operators",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:50205"
},
{
"category": "workaround",
"details": "To mitigate this issue, restrict network access to services that process MIME headers from untrusted sources. Implement input validation and sanitization for all incoming data, especially MIME headers, to prevent maliciously crafted content from being processed by applications utilizing the vulnerable Golang MIME package.",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header"
},
{
"cve": "CVE-2026-42507",
"cwe": {
"id": "CWE-117",
"name": "Improper Output Neutralization for Logs"
},
"discovery_date": "2026-06-02T23:01:03.125126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484205"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the net/textproto package in Golang. When functions in this package return errors, they include their input as part of the error message. An attacker could exploit this by injecting misleading content into these error messages, which are then printed or logged. This could lead to confusion or misinterpretation of critical system information.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/textproto: golang: Golang net/textproto: Misleading error messages via input injection",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42507"
},
{
"category": "external",
"summary": "RHBZ#2484205",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484205"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42507",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42507"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42507",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42507"
},
{
"category": "external",
"summary": "https://go.dev/cl/777060",
"url": "https://go.dev/cl/777060"
},
{
"category": "external",
"summary": "https://go.dev/issue/79346",
"url": "https://go.dev/issue/79346"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5039",
"url": "https://pkg.go.dev/vuln/GO-2026-5039"
}
],
"release_date": "2026-06-02T22:01:37.307000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-04T15:29:30+00:00",
"details": "For details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/operators/administrator-tasks#olm-upgrading-operators",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:50205"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "net/textproto: golang: Golang net/textproto: Misleading error messages via input injection"
},
{
"acknowledgments": [
{
"names": [
"Andrew Tridgell \u003ctridge60@gmail.com\u003e",
"Alexander Peslyak \u003csolar@openwall.com\u003e"
]
}
],
"cve": "CVE-2026-54369",
"cwe": {
"id": "CWE-59",
"name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
},
"discovery_date": "2026-06-16T23:47:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2490277"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `acl` package, specifically within its `libacl` pathname-based functions. A local attacker could exploit this vulnerability by using a symbolic link to replace a pathname component. This could allow the attacker to redirect access control list (ACL) read or write operations to arbitrary files or directories, leading to unauthorized manipulation of ACLs and ultimately local privilege escalation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "acl: Symlink traversal privilege escalation via libacl functions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat rates this flaw as Important because a local attacker who controls any component of a pathname processed by a privileged process using libacl can redirect ACL operations to arbitrary files. Exploitation requires local access with the ability to create symlinks in a directory that a privileged program later processes with acl_get_file() or acl_set_file(). In default RHEL and OpenShift CoreOS configurations, standard file permission settings limit where unprivileged users can create symlinks, reducing the practical attack surface. Programs that operate on user-supplied paths with elevated privileges are most at risk.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-54369"
},
{
"category": "external",
"summary": "RHBZ#2490277",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2490277"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-54369",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54369"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-54369",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-54369"
}
],
"release_date": "2026-06-29T13:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-04T15:29:30+00:00",
"details": "For details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/operators/administrator-tasks#olm-upgrading-operators",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:50205"
},
{
"category": "workaround",
"details": "Restrict unprivileged users from creating symlinks in directories that privileged processes operate on with ACL commands. Where possible, use the fs.protected_symlinks sysctl (enabled by default on RHEL 7+), which prevents symlink following in world-writable sticky directories unless the owner of the symlink matches the owner of the target file or directory.",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "acl: Symlink traversal privilege escalation via libacl functions"
},
{
"acknowledgments": [
{
"names": [
"Andrew Tridgell \u003ctridge60@gmail.com\u003e",
"Alexander Peslyak \u003csolar@openwall.com\u003e"
]
}
],
"cve": "CVE-2026-54370",
"cwe": {
"id": "CWE-367",
"name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
},
"discovery_date": "2026-06-16T19:47:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2490279"
}
],
"notes": [
{
"category": "description",
"text": "A time-of-check to time-of-use (TOCTOU) race condition vulnerability was found in `acl`. By replacing a pathname component with a symbolic link between a security check and subsequent file operations, an attacker can redirect file access control list operations. This occurs when privileged processes invoke `getfacl` or `setfacl` over an attacker-controlled path, potentially leading to local privilege escalation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "acl: TOCTOU Symlink Traversal via getfacl/setfacl",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-54370"
},
{
"category": "external",
"summary": "RHBZ#2490279",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2490279"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-54370",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54370"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-54370",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-54370"
}
],
"release_date": "2026-06-29T13:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-04T15:29:30+00:00",
"details": "For details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/operators/administrator-tasks#olm-upgrading-operators",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:50205"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "acl: TOCTOU Symlink Traversal via getfacl/setfacl"
}
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Loading…
Loading…